Act respecting the protection of personal information in the private sector, security measures
In force.
A comprehensive regime rule binding private bodies.
- Obligation class
- Security
- Audit expectation
- none
What it requires
- Take the security measures necessary to protect the personal information you collect, use, communicate, keep or destroy, measures that are reasonable given the sensitivity of the information, the purposes for which it is used, its quantity and distribution and the medium on which it is stored (s. 10).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
Section 10 requires security measures that are reasonable given the sensitivity of the information, its purposes, its quantity and distribution and its medium. It names no log, register or record, sets no period, and says nobody may demand a record, so no logging duty is found.
- Kind
- None
- As of
What this law does
A person carrying on an enterprise must take the security measures necessary to ensure the protection of the personal information collected, used, communicated, kept or destroyed and that are reasonable given the sensitivity of the information, the purposes for which it is to be used, the quantity and distribution of the information and the medium on which it is stored.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .