Major provisions of Quebec's Law 25 entered into force 22 Sept. The legislation contained within the omnibus Bill 64 passed in 2021 aims to improve personal data protection standards and modernize the Private Sector Act. Law 25 empowers Quebec's data protection authority, the Commission d'accès à l'information du Québec, to enforce several new requirements, including conducting privacy impact assessments before transferring personal data outside the province and enhanced transparency requirements.
25 Sept. 2023
New privacy requirements under Quebec's Law 25 now in force
Related stories
EU enforcement and guidance: A discussion with EDPB Chair Anu Talus
Even exempt organizations need to be data mapping: Here's why
AI as product vs. AI as service: Unpacking the liability divide in EU safety legislation
Not bias-free: Managing bias in generative AI with clarity and courage
European Commission proposes significant reforms to GDPR, AI Act
