Distributes a software product, in New Brunswick

S.N.B. 2009, c. P-7.05, ss. 1, 52; N.B. Reg. 2010-112, s. 21 · Read the law's page

• These duties bind a custodian that uses an agent or an information manager and an information manager that signs the agreement; an information manager is an individual or organization that processes, stores, retrieves, archives or disposes of personal health information, de-identifies or transforms it, or provides information management or information technology services on behalf of a custodian (ss. 1, 52).
• If you are a custodian, enter into a written agreement with an agent you retain for the collection, use, disclosure or retention of personal health information, requiring the agent to comply with your legal obligations (s. 52 (1)).
• If you are a custodian, enter into a written agreement with an information manager before providing it personal health information, providing for protection against unauthorized access, use or disclosure and for secure destruction or alteration, and describing the services and the safeguards the information manager employs (s. 52 (3); Reg. s. 21).
• If you are an information manager that has entered into such an agreement, comply with the duties it imposes and with the same protection, retention and secure destruction requirements that bind the custodian (s. 52 (4)).