New Brunswick PHIPAA

New Brunswick repealed its section on disclosing personal health information outside the province in 2017 (s. 47, repealed 2017, c. 30).

A custodian may give personal health information to an information manager "for the purpose of processing, storing or destroying" it or for information technology services (s. 52(2)), under a written agreement that protects it (s. 52(3)). The regulation says the agreement must describe the services and the information manager's safeguards (Regulation 2010-112, s. 21).

The regulation speaks to storage outside Canada in one case: "Information managers providing a public body with information management or information technology services may store personal health information in their custody or in their control outside Canada" (Regulation 2010-112, s. 22).