Retention of personal information
s40.--(1)
Personal information that has been used by an
institution shall be retained after use by the institution for the period
prescribed by regulation in order to ensure that the individual to whom it
relates has a reasonable opportunity to obtain access to the personal
information.
Standard of accuracy
(2) The head of an institution shall take reasonable steps to ensure that
personal information on the records of the institution is not used unless it is
accurate and up to date.
Exception
(3) Subsection (2) does not apply to personal information collected for
law
enforcement purposes.
Disposal of personal information
(4) A head shall dispose of personal information under the control of the
institution in accordance with the regulations.
R.S.O. 1990, c. F.31, s. 40.
|