Act to establish a legal framework for information technology, service provider custody of technology-based documents
In force since .
A security baseline statutes rule binding public and private bodies.
- Obligation class
- Security
As of .
What it requires
- If you place a technology-based document in the custody of a service provider, tell the provider beforehand what privacy protection the document needs, given the confidentiality of its information, and who is authorized to access it (s. 26).
- If you hold a technology-based document in custody for someone else as a service provider, see to it that the agreed technological means are in place to ensure its security and maintain its integrity, and, if applicable, to protect its confidentiality and prevent access by unauthorized persons (s. 26).
- As a service provider holding a document in custody, comply with any other legal obligation on the retention of the document (s. 26).
These lines are LexLint's reading of the law's text, as of .
What this law does
Anyone who places a technology-based document in the custody of a service provider must first inform the provider of the privacy protection the document requires, according to the confidentiality of the information it contains, and of the persons who are authorized to access it.
During the period the document is in the provider's custody, the service provider must see to it that the agreed technological means are in place to ensure its security, maintain its integrity and, if applicable, protect its confidentiality and prevent access by unauthorized persons. The service provider must also ensure compliance with any other obligation provided for by law as regards the retention of the document. The Act came into force on , except section 104, which took effect on .
When LexLint raises it
When your app profile says your app reuses other publishers' content, sends automated outreach, crawls the web, deploys a chatbot, distributes a software product, generates content with AI, makes high-risk automated decisions, operates an app store, operates a social platform, processes biometric data, processes voice recordings, publishes adult content, records calls, records text chat, serves under-18s, ships a mobile app, tracks devices or trains models.