Quebec's data protection authority, the Commission d'accès a l'information du Québec, adopted the final version of its guidelines for organizations to obtain valid consent to process personal data under Law 25. The guidelines are the first set of instructions clarifying certain Law 25 requirements issued by the CAI, with additional guidelines addressing other provisions of the law to come.