•  (1) Subsection 20(1) of the Act is replaced by the following:

    Marginal note:Confidentiality
    • 20. (1) Subject to subsections (2) to (6), 12(3), 12.2(3), 13(3), 19(1), 23(3) and 23.1(1) and section 25, the Commissioner or any person acting on behalf or under the direction of the Commissioner shall not disclose any information that comes to their knowledge as a result of the performance or exercise of any of the Commissioner’s duties or powers under this Part.

  • (2) Section 20 of the Act is amended by adding the following after subsection (5):

    • Marginal note:Disclosure

      (6) The Commissioner may disclose information, or may authorize any person acting on behalf or under the direction of the Commissioner to disclose information, in the course of proceedings in which the Commissioner has intervened under paragraph 50(c) of An Act to promote the efficiency and adaptability of the Canadian economy by regulating certain activities that discourage reliance on electronic means of carrying out commercial activities, and to amend the Canadian Radio-television and Telecommunications Commission Act, the Competition Act, the Personal Information Protection and Electronic Documents Act and the Telecommunications Act or in accordance with subsection 58(3) or 60(1) of that Act.

 Section 23 of the Act is replaced by the following:

Marginal note:Consultations with provinces
  • 23. (1) If the Commissioner considers it appropriate to do so, or on the request of an interested person, the Commissioner may, in order to ensure that personal information is protected in as consistent a manner as possible, consult with any person who, under provincial legislation, has functions and duties similar to those of the Commissioner with respect to the protection of such information.

  • Marginal note:Agreements or arrangements with provinces

    (2) The Commissioner may enter into agreements or arrangements with any person referred to in subsection (1) in order to

    • (a) coordinate the activities of their offices and the office of the Commissioner, including to provide for mechanisms for the handling of any complaint in which they are mutually interested;

    • (b) undertake and publish research or develop and publish guidelines or other instruments related to the protection of personal information;

    • (c) develop model contracts or other instruments for the protection of personal information that is collected, used or disclosed interprovincially or internationally; and

    • (d) develop procedures for sharing information referred to in subsection (3).

  • Marginal note:Sharing of information with provinces

    (3) The Commissioner may, in accordance with any procedure established under paragraph (2)(d), share information with any person referred to in subsection (1), if the information

    • (a) could be relevant to an ongoing or potential investigation of a complaint or audit under this Part or provincial legislation that has objectives that are similar to this Part; or

    • (b) could assist the Commissioner or that person in the exercise of their functions and duties with respect to the protection of personal information.

  • Marginal note:Purpose and confidentiality

    (4) The procedures referred to in paragraph (2)(d) shall

    • (a) restrict the use of the information to the purpose for which it was originally shared; and

    • (b) stipulate that the information be treated in a confidential manner and not be further disclosed without the express consent of the Commissioner.

Marginal note:Disclosure of information to foreign state
  • 23.1 (1) Subject to subsection (3), the Commissioner may, in accordance with any procedure established under paragraph (4)(b), disclose information referred to in subsection (2) that has come to the Commissioner’s knowledge as a result of the performance or exercise of any of the Commissioner’s duties or powers under this Part to any person or body who, under the legislation of a foreign state, has

    • (a) functions and duties similar to those of the Commissioner with respect to the protection of personal information; or

    • (b) responsibilities that relate to conduct that is substantially similar to conduct that would be in contravention of this Part.

  • Marginal note:Information that can be shared

    (2) The information that the Commissioner is authorized to disclose under subsection (1) is information that the Commissioner believes

    • (a) would be relevant to an ongoing or potential investigation or proceeding in respect of a contravention of the laws of a foreign state that address conduct that is substantially similar to conduct that would be in contravention of this Part; or

    • (b) is necessary to disclose in order to obtain from the person or body information that may be useful to an ongoing or potential investigation or audit under this Part.

  • Marginal note:Written arrangements

    (3) The Commissioner may only disclose information to the person or body referred to in subsection (1) if the Commissioner has entered into a written arrangement with that person or body that

    • (a) limits the information to be disclosed to that which is necessary for the purpose set out in paragraph (2)(a) or (b);

    • (b) restricts the use of the information to the purpose for which it was originally shared; and

    • (c) stipulates that the information be treated in a confidential manner and not be further disclosed without the express consent of the Commissioner.

  • Marginal note:Arrangements

    (4) The Commissioner may enter into arrangements with one or more persons or bodies referred to in subsection (1) in order to

    • (a) provide for cooperation with respect to the enforcement of laws protecting personal information, including the sharing of information referred to in subsection (2) and the provision of mechanisms for the handling of any complaint in which they are mutually interested;

    • (b) establish procedures for sharing information referred to in subsection (2);

    • (c) develop recommendations, resolutions, rules, standards or other instruments with respect to the protection of personal information;

    • (d) undertake and publish research related to the protection of personal information;

    • (e) share knowledge and expertise by different means, including through staff exchanges; or

    • (f) identify issues of mutual interest and determine priorities pertaining to the protection of personal information.

 
Date modified: