Law / Canada / Nova Scotia
Personal Information International Disclosure Protection Act, offences
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived . Publisher's page: https://nslegislature.ca/sites/default/files/legc/statutes/persinfo.htmIn force since .
An enforcement supervision rule binding public and private bodies.
- Obligation class
- Prohibition, Security
As of .
What it requires
- If you are a service provider, or an employee or associate of one, do not store or allow access to personal information contrary to section 5(1), collect or use personal information beyond what section 5(4) allows, fail to make reasonable security arrangements to protect it, or contravene sections 6 to 9 (s. 13(1)).
- If you are a director, officer or employee of a public body, do not maliciously disclose personal information in contravention of the Act or the regulations (s. 12).
These lines are LexLint's reading of the law's text, as of .
If you get it wrong
Criminal exposureYes
Criminal exposure note
Section 12 makes malicious disclosure by a director, officer or employee of a public body an offence punishable by a fine of not more than $2,000 or imprisonment for six months, or both, and section 13 makes the service-provider contraventions offences punishable on summary conviction.
Penalty structure
Section 13(3) sets a fine of not more than $500,000 for a corporation, $25,000 for an individual who is a service provider and $2,000 for any other individual.
- Rule
- Fixed only
- As of
- Currency
- CAD
- Fixed cap
- 500,000
What this law does
A service provider, or an employee or associate of a service provider, who stores or allows access to personal information contrary to the limit in section 5(1), collects or uses personal information beyond what section 5(4) allows or fails to make reasonable security arrangements, or contravenes section 6, 7, 8 or 9, is guilty of an offence.
A person guilty of that offence is liable on summary conviction to a fine of not more than two thousand dollars for an individual who is not a service provider, twenty-five thousand dollars for an individual who is a service provider and five hundred thousand dollars for a corporation. It is a defence for the person charged to prove that the person exercised due diligence to avoid the commission of the offence.
A director, officer or employee of a public body who maliciously discloses personal information in contravention of the Act or the regulations is guilty of an offence and liable on summary conviction to a fine of not more than two thousand dollars or to imprisonment for six months, or both. The Act came into force on .
When LexLint raises it
When your app profile says your app crawls the web, trains models, generates content with AI, deploys a chatbot, makes high-risk automated decisions, processes voice recordings, processes biometric data, operates a social platform, serves under-18s, operates an app store, ships a mobile app or reuses other publishers' content.