(c) develop model contracts or other instruments for the protection of personal information that is collected, used or disclosed interprovincially or internationally; and
(2) Nothing in this section impairs any right of an employee either at law or under an employment contract or collective agreement.
(3) In this section, employee includes an independent contractor and employer has a corresponding meaning. 2000, c. 5, s. 27.1; 2015, c. 32, s. 23.
An organization is responsible for personal information in its possession or custody, including information that has been transferred to a third party for processing. The organization shall use contractual or other means to provide a comparable level of protection while the information is being processed by a third party.
An individual may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. The organization shall inform the individual of the implications of such withdrawal.