Act to establish a legal framework for information technology, security measures for confidential technology-based documents
In force since .
A security baseline statutes rule binding public and private bodies.
- Obligation class
- Security
As of .
What it requires
- Take appropriate security measures to protect the confidentiality of a technology-based document containing confidential information if you are the person responsible for access to it (s. 25).
- Control access to the document, for example by a restricted view technique or any technique that prevents unauthorized persons from accessing the information or the document, or the components that provide access to it (s. 25).
These lines are LexLint's reading of the law's text, as of .
What this law does
The person responsible for access to a technology-based document containing confidential information must take appropriate security measures to protect its confidentiality. Such measures include controlling access to the document by means of a restricted view technique, or any technique that prevents unauthorized persons from accessing such information or from otherwise accessing the document or the components providing access to it.
A technology-based document is a document in any medium based on any information technology referred to in paragraph 2 of section 1 of the Act. The Act came into force on , except section 104, which took effect on .
When LexLint raises it
When your app profile says your app reuses other publishers' content, sends automated outreach, crawls the web, deploys a chatbot, distributes a software product, generates content with AI, makes high-risk automated decisions, operates an app store, operates a social platform, processes biometric data, processes voice recordings, publishes adult content, records calls, records text chat, serves under-18s, ships a mobile app, tracks devices or trains models.