Basic Search

Marginal note:Conditions for authorizations

• [...]

• (3) The Minister may issue an authorization under subsection 27(1) or (2) only if he or she concludes that there are reasonable grounds to believe — in addition to the matters referred to in subsection (1) — that

  • [...]

  • (c) any information acquired under the authorization is necessary to identify, isolate, prevent or mitigate harm to

    [...]

  • (d) the measures referred to in section 24 will ensure that information acquired under the authorization that is identified as relating to a Canadian or a person in Canada will be used, analysed or retained only if the information is essential to identify, isolate, prevent or mitigate harm to

    [...]

Marginal note:Establishment’s activities

• [...]

• (3) Despite subsection 22(1), the Establishment may carry out any of the following activities in furtherance of the cybersecurity and information assurance aspect of its mandate:

  • (a) carrying out activities on information infrastructures to identify or isolate malicious software, prevent malicious software from harming those information infrastructures or mitigate any harm that malicious software causes to them; and

• [...]

• (5) The following definitions apply in this section.

  infrastructure information

  infrastructure information  means information relating to

  [...]

  It does not include information that could be linked to an identifiable person. (information sur l’infrastructure)

Marginal note:Canadian identifying information

43 The Establishment may disclose, to persons or classes of persons designated under section 45, information that could be used to identify a Canadian or a person in Canada and that has been used, analysed or retained under an authorization issued under subsection 26(1) or 40(1), if the Establishment concludes that the disclosure is essential to international affairs, defence, security or cybersecurity.