Amendments to Quebec's Privacy Act bring new data protection rules into effect
October 19, 2023
Amendments to Quebec’s Act respecting the protection of personal information in the private sector came into force on Sept. 22, including new requirements to record consent to collect, disclose, or use personal information.
Organizations must review or develop internal policies and best practices to protect personal information that complies with legal requirements. These should be reviewed by the organization’s privacy officer.
Regarding transferring personal information outside Quebec, an organization should conduct a privacy impact assessment (PIA). Individuals should also be alerted their information is being shared outside the province. There also should be a written agreement between the organization and the third party receiving the personal information, taking the PIA into account, while mitigating risks.
Finally, a new framework has been published for enforcing monetary administrative penalties on anyone who fails to comply with the Act.
