75 (1) Where this Act or the regulations authorize a person to collect or use personal information, biometric information may be collected or used only for the following purposes: 1.  To ensure that an individual is registered only once as an applicant, recipient, spouse or dependent adult. 2.  To authenticate the identity of an individual who claims to be entitled to assistance. 3.  To enable an individual to receive and give receipt for assistance provided through a financial institution or other authorized provider. 4.  To enable an applicant, recipient, spouse or dependent adult to access personal information. 5.  To enable an individual to make a declaration electronically by voice or other means for any purposes authorized under this Act. 6.  To match data in accordance with an agreement made under section 71 or 72 for the purpose of ensuring eligibility for assistance or benefits.  1997, c. 25, Sched. A, s. 75 (1); 1999, c. 6, s. 50 (7); 2005, c. 5, s. 54 (7). Same (2) Biometric information may be collected under this Act only from the individual to whom it relates, in accordance with an agreement referred to in paragraph 6 of subsection (1) or in accordance with section 73.  1997, c. 25, Sched. A, s. 75 (2). Same (3) Biometric information shall not be disclosed to a third party except in accordance with, (a)  a court order or a warrant; (b)  an agreement under section 71 or 72 that is made for the purpose of ensuring eligibility for a social benefit program, including a social benefit program under the Income Tax Act, the Taxation Act, 2007 or the Income Tax Act (Canada); or (c)  section 73.  1997, c. 25, Sched. A, s. 75 (3); 2008, c. 19, Sched. V, s. 9 (5). Same (4) Biometric information to be collected from the individual to whom it relates shall be collected openly and directly from the individual.  1997, c. 25, Sched. A, s. 75 (4). Same (5) An administrator shall ensure that biometric information can be accessed and used only by those persons who need the information in order to perform their duties under this Act and that it is not used as a unique file identifier or common personal file identifier, except as authorized under subsection (1).  1997, c. 25, Sched. A, s. 75 (5). Same (6) An administrator shall ensure that biometric information collected under this Act is encrypted forthwith after collection, that the original biometric information is destroyed after encryption and that the encrypted biometric information is stored or transmitted only in encrypted form and destroyed in the prescribed manner.  1997, c. 25, Sched. A, s. 75 (6). Same (7) Neither the Director nor an administrator shall implement a system that can reconstruct or retain the original biometric sample from encrypted biometric information or that can compare it to a copy or reproduction of biometric information not obtained directly from the individual.  1997, c. 25, Sched. A, s. 75 (7). Same (8) The only personal information that may be retained together with biometric information concerning an individual is the individual’s name, address, date of birth and sex.  1997, c. 25, Sched. A, s. 75 (8). Same (9) For the purpose of section 67 of the Freedom of Information and Protection of Privacy Act and section 53 of the Municipal Freedom of Information and Protection of Privacy Act, subsection (3) is a confidentiality provision that prevails over those Acts.  1997, c. 25, Sched. A, s. 75 (9). Section Amendments with date in force (d/m/y) 1999, c. 6, s. 50 (7) - 01/03/2000 2005, c. 5, s. 54 (7) - 13/06/2005 2008, c. 19, Sched. V, s. 9 (5) - 01/01/2009