Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5)

Act current to 2015-08-04 and last amended on 2015-06-23. Previous Versions

Marginal note:Prospective business transaction
  •  (1) In addition to the circumstances set out in subsections 7(2) and (3), for the purpose of clause 4.3 of Schedule 1, and despite the note that accompanies that clause, organizations that are parties to a prospective business transaction may use and disclose personal information without the knowledge or consent of the individual if

    • (a) the organizations have entered into an agreement that requires the organization that receives the personal information

      • (i) to use and disclose that information solely for purposes related to the transaction,

      • (ii) to protect that information by security safeguards appropriate to the sensitivity of the information, and

      • (iii) if the transaction does not proceed, to return that information to the organization that disclosed it, or destroy it, within a reasonable time; and

    • (b) the personal information is necessary

      • (i) to determine whether to proceed with the transaction, and

      • (ii) if the determination is made to proceed with the transaction, to complete it.

  • Marginal note:Completed business transaction

    (2) In addition to the circumstances set out in subsections 7(2) and (3), for the purpose of clause 4.3 of Schedule 1, and despite the note that accompanies that clause, if the business transaction is completed, organizations that are parties to the transaction may use and disclose personal information, which was disclosed under subsection (1), without the knowledge or consent of the individual if

    • (a) the organizations have entered into an agreement that requires each of them

      • (i) to use and disclose the personal information under its control solely for the purposes for which the personal information was collected, permitted to be used or disclosed before the transaction was completed,

      • (ii) to protect that information by security safeguards appropriate to the sensitivity of the information, and

      • (iii) to give effect to any withdrawal of consent made under clause 4.3.8 of Schedule 1;

    • (b) the personal information is necessary for carrying on the business or activity that was the object of the transaction; and

    • (c) one of the parties notifies the individual, within a reasonable time after the transaction is completed, that the transaction has been completed and that their personal information has been disclosed under subsection (1).

  • Marginal note:Agreements binding

    (3) An organization shall comply with the terms of any agreement into which it enters under paragraph (1)(a) or (2)(a).

  • Marginal note:Exception

    (4) Subsections (1) and (2) do not apply to a business transaction of which the primary purpose or result is the purchase, sale or other acquisition or disposition, or lease, of personal information.

  • 2015, c. 32, s. 7.
Marginal note:Employment relationship

 In addition to the circumstances set out in section 7, for the purpose of clause 4.3 of Schedule 1, and despite the note that accompanies that clause, a federal work, undertaking or business may collect, use and disclose personal information without the consent of the individual if

  • (a) the collection, use or disclosure is necessary to establish, manage or terminate an employment relationship between the federal work, undertaking or business and the individual; and

  • (b) the federal work, undertaking or business has informed the individual that the personal information will be or may be collected, used or disclosed for those purposes.

  • 2015, c. 32, s. 7.