By Eric Caouette, VP Business Development at Coginov

As a personal information officer for an organization that must compile credit files containing personal information, you have several obligations, and here are a few important ones:

As of September 2023, you have two main obligations.

1. Destroying information more than seven years olds: As of September 2023, you will be required to destroy any personal information that has reached the end of its useful life, which in financial matters is generally 7 years. Note that this obligation does not apply to information contained in an investigative file created to prevent, detect or repress a crime or a breach of the law.
2. Establish and enforce rules of conduct on access and rectifications: Citizens must now be able to control the accuracy of their personal information, as well as its circulation and use for various purposes.
   
   

   This is why as of September 22, 2023, you will also be required to:

• establish and apply rules of conduct that allow any person concerned by personal information you hold to have access to it, in a manner that ensures its protection.

• establish and apply rules of conduct to allow rectification of such information.