Major provisions of Quebec's Law 25 entered into force 22 Sept. The legislation contained within the omnibus Bill 64 passed in 2021 aims to improve personal data protection standards and modernize the Private Sector Act. Law 25 empowers Quebec's data protection authority, the Commission d'accès à l'information du Québec, to enforce several new requirements, including conducting privacy impact assessments before transferring personal data outside the province and enhanced transparency requirements.
25 Sept. 2023
New privacy requirements under Quebec's Law 25 now in force
Related stories
Notes from the IAPP Europe: Wrapping up November with the IAPP DPC
Ireland's DPC details legitimate interest prong of its LinkedIn enforcement action
What the new European Commission could mean for digital regulation
IAPP DPC 2024: Reynders discusses GDPR enforcement harmonization, adequacy developments
US Senate subcommittee ponders accountability for AI-assisted scams