As an institution, Concordia is subject to the Act respecting Access to documents held by public bodies and the Protection of personal information, chapter A-2.1 (the “Act”). The Act defines Personal Information as any information that allows an individual to be identified, either directly or indirectly.
To comply with the Act, Concordia must ensure that all third party partners or service providers that it engages with are held to specific privacy obligations contained in the law. The obligations apply to any contract, partnership, agreement, or purchase order for goods or services, including software or consulting agreement (referred to as “contracts”), regardless of the value of the contract. The obligations also apply in the case of “free”, “trial basis” or otherwise zero value contracts. In order to adhere to the obligations, all units, departments, or individuals entering into any such contract must incorporate into the contract the required Personal Information Clause along with its linked Addendum.