1E9Ct5D

PIIDPA applies to all records in the custodyor under the control of a public body,including court administration records. Thescope of application is limited to personalinformation, as defined under FOIPOP.Under PIIDPA, public bodies andmunicipalities are mandated to make surethat any personal information held by them(and by any service provider under theirdirection and/or authority), stays in Canadaand is only accessed and disclosed inCanada.Any individual employee who violates any ofthe above provisions is liable on convictionto a fine of up to $2,000 and/or six months’imprisonment. For businesses excludingcorporations, the penalty will not exceed$25,000. Corporations are subject to a fineof not more than $500,000.However, several circumstances exist underPIIDPA that provide exceptions from theabove standards. These exclusions shouldbe examined in detail before public bodiestake any action moving or storinginformation outside Canada. Private entitiesshould also be aware of protections forpersonal information outside Canada whenrequesting international record releasesfrom the Nova Scotia public sector.Offences under PIIDPA include, but are notlimited to:Mmalicious disclosure of personalinformation in contravention of thelegislation by a director, officer oremployee of a public body;Storage or access to personalinformation outside Canada by aservice provider without satisfying anexception; andCollection or use of personalinformation by a service providerbeyond what is necessary for itspurpose, or failure to makereasonable security arrangements toprotect that information.Privacy Law 89