An employer must, by law, take appropriate measures to ensure the confidential nature of personal information that he holds with regard to his employees. Quebec statutes applicable to public bodies 1 and private enterprises 2 define "personal information" as follows: any information which relates to a natural person and allows that person to be identified.
Within a public body or an enterprise, only those employees for whom it is necessary in the performance of their duties are entitled to use personal information held by their employer without the consent of the person concerned. Likewise, no information may be conveyed to a third party without such consent except in the cases of exceptions provided for by law.