Major provisions of Quebec's Law 25 entered into force 22 Sept. The legislation contained within the omnibus Bill 64 passed in 2021 aims to improve personal data protection standards and modernize the Private Sector Act. Law 25 empowers Quebec's data protection authority, the Commission d'accès à l'information du Québec, to enforce several new requirements, including conducting privacy impact assessments before transferring personal data outside the province and enhanced transparency requirements.
25 Sept. 2023
New privacy requirements under Quebec's Law 25 now in force
Related stories
Notes from the Asia-Pacific region: Australia eSafety Commissioner launches social media age restrictions hub
EU Data operational impacts: The Data Act's interplay within the EU digital rulebook
The 2025 Brazilian DPO: Navigating high risks with limited runways
PETs: Beyond privacy-enhancing
Notes from the IAPP Canada: Ontario IPC's deidentification guidelines a welcome regulatory addition
