New privacy requirements under Quebec's Law 25 now in force

Major provisions of Quebec's Law 25 entered into force 22 Sept. The legislation contained within the omnibus Bill 64 passed in 2021 aims to improve personal data protection standards and modernize the Private Sector Act. Law 25 empowers Quebec's data protection authority, the Commission d'accès à l'information du Québec, to enforce several new requirements, including conducting privacy impact assessments before transferring personal data outside the province and enhanced transparency requirements.