Quebec’s data protection authority, Le Commission d’accès à l’information du Quebec, announced certain business requirements under Bill 64, which updates the province's private sector privacy law, have taken effect. The new obligations include privacy officer appointments, mandatory breach notification, biometric information system registration and user consent exceptions. Additional requirements will take force in 2023 and 2024. Editor's note: Samuel Adams broke down changes brought on by Bill 64.