Quebec's Act respecting the protection of personal information in the private sector (ARPPIPS) sets out specific exceptions to its application, including an exception for personal information that is publicly available by law.

Text of Relevant Provisions

ARPPIPS Div.1(1):

"Divisions II and III of this Act do not apply to personal information which by law is public. Nor do they apply to personal information concerning the performance of duties within an enterprise by the person concerned, such as the person’s name, title and duties, as well as the address, email address and telephone number of the person’s place of work."

Original (French):

"Les sections II et III ne s'appliquent pas aux renseignements personnels qui sont publics en vertu de la loi. Elles ne s'appliquent pas non plus aux renseignements personnels concernant l'exercice, par la personne concernée, de fonctions au sein d'une entreprise, tels son nom, son titre et ses fonctions, ainsi que l'adresse, l'adresse de courrier électronique et le numéro de téléphone de son lieu de travail."

Analysis of Provisions

ARPPIPS Div.1(1) establishes two distinct categories of exemptions:

1. Information Public by Law: This broadly exempts personal information deemed public under other legislation. This could encompass various information, including names and addresses listed in public registries, court judgments, or information disclosed through freedom of information requests.
2. Work-Related Information: This exception covers specific details about an individual's professional role within an enterprise. This includes their name, job title, duties, work address, email address, and work telephone number. The provision aims to facilitate business communication and transparency regarding individuals' professional identities.

Implications

• Reduced Compliance Burden: Businesses handling personal information falling under these exceptions have fewer obligations under ARPPIPS. They may not need to obtain consent for collection, use, or disclosure, nor comply with certain data subject rights requests.
• Scope Limitation: The "by law" qualifier for publicly available information is crucial. Information might be publicly accessible (e.g., social media posts) but not fall under this exception if no legal mandate exists for its public nature.
• Business Communication: The work-related information exception facilitates routine business interactions. For example, sharing an employee's work contact information during regular business operations would generally be permissible.
• Due Diligence Required: While exempt from certain ARPPIPS provisions, organizations should exercise caution. Other laws (e.g., Quebec's Charter of Human Rights and Freedoms) might still apply to this information, requiring responsible and ethical handling.