P-39.1 - Act respecting the protection of personal information in the private sector

Section 23 Disposition versions

2023-09-22

23. Where the purposes for which personal information was collected or used are achieved, the person carrying on an enterprise must destroy the information, or anonymize it to use it for serious and legitimate purposes, subject to any preservation period provided for by an Act.

For the purposes of this Act, information concerning a natural person is anonymized if it is, at all times, reasonably foreseeable in the circumstances that it irreversibly no longer allows the person to be identified directly or indirectly.

Information anonymized under this Act must be anonymized according to generally accepted best practices and according to the criteria and terms determined by regulation.

1993, c. 17, s. 23; 2021, c. 25, s. 119.

1994-07-01

23. A person carrying on an enterprise may, without the consent of the persons concerned, use, for purposes of commercial or philanthropic prospection, a nominative list of his clients, members or employees.

Every person using such a list for such purposes must grant the persons concerned a valid opportunity to refuse that the information concerning them be used for such purposes.

1993, c. 17, s. 23.

1994-01-01

23. A person carrying on an enterprise may, without the consent of the persons concerned, use, for purposes of commercial or philanthropic prospection, a nominative list of his clients, members or employees.

In force: 1994-07-01

Every person using such a list for such purposes must grant the persons concerned a valid opportunity to refuse that the information concerning them be used for such purposes.

1993, c. 17, s. 23.