Correction of Personal Information. Within 5 Business Days of receiving a written direction from the Province to correct or annotate any personal information, the Contractor must annotate or correct the information in accordance with the direction. When issuing a written direction under section 10, the Province must advise the Contractor of the date the correction request to which the direction relates was received by the Province in order that the Contractor may comply with section 12. Within 5 Business Days of correcting or annotating any personal information under section 10, the Contractor must provide the corrected or annotated information to any party to whom, within one year prior to the date the correction request was made to the Province, the Contractor disclosed the information being corrected or annotated. If the Contractor receives a request for correction of personal information from a person other than the Province, the Contractor must promptly advise the person to make the request to the Province and, if the Province has advised the Contractor of the name or title and contact information of an official of the Province to whom such requests are to be made, the Contractor must also promptly provide that official’s name or title and contact information to the person making the request. The Contractor must protect personal information by making reasonable security arrangements against such risks as unauthorized access, collection, use, disclosure or disposal, including any expressly set out in the Agreement. Unless the Province otherwise directs in writing, the Contractor must not store personal information outside Canada or permit access to personal information from outside Canada. Unless the Agreement otherwise specifies, the Contractor must retain personal information until directed by the Province in writing to dispose of it or deliver it as specified in the direction. Unless the Province otherwise directs in writing, the Contractor may only use personal information if that use is for the performance of the Contractor’s obligations, or the exercise of the Contractor’s rights, under the Agreement. Unless the Province otherwise directs in writing, the Contractor may only disclose personal information inside Canada to any person other than the Province if the disclosure is for the performance of the Contractor’s obligations, or the exercise of the Contractor’s rights, under the Agreement. Unless the Agreement otherwise specifies or the Province otherwise directs in writing, the Contractor must not disclose personal information outside Canada. In addition to any obligation the Contractor may have to provide the notification contemplated by section 30.2 of the Act, if in relation to personal information in the custody or under the control of the Contractor, the Contractor: receives a foreign demand for disclosure; receives a request to disclose, produce or provide access that the Contractor knows or has reason to suspect is for the purpose of responding to a foreign demand for disclosure; or has reason to suspect that an unauthorized disclosure of personal information has occurred in response to a foreign demand for disclosure the Contractor must immediately notify the Province and, in so doing, provide the information described in section 30.2(3) of the Act. In this section, the phrases “foreign demand for disclosure” and “unauthorized disclosure of personal information” will bear the same meanings as in section 30.2 of the Act.
Appears in 10 contracts
Samples: Financial Review and Assurance Services Agreement, General Service Agreement, Professional Services