Jurisdiction

Quebec, Canada: data, AI and cyber laws

Regulations

Add to calendar

Apple Calendar or Outlook Google Calendar Download .ics

Quebec Law 25Overhauls Quebec's private-sector privacy law with GDPR-style duties: a designated person in charge of privacy, confidentiality incident reporting, privacy impact assessments (including before transfers outside Quebec), privacy by default, automated decision transparency, and data portability.In effect since Sep 22, 2022

Past deadlines

ComplianceSep 22, 2024 · 2.1 years ago · Source

Phase 3: data portabilityRight to data portability in a structured, commonly used technological format applies.

ComplianceSep 22, 2023 · 3.1 years ago · Source

Phase 2: main obligations and penaltiesGovernance policies, PIAs, consent, transparency, privacy by default, ADM notices, cross-border PIAs and AMP/penal regime apply.

ComplianceSep 22, 2022 · 4.1 years ago · Source

Phase 1: privacy officer and incident reportingPerson in charge of personal information protection, confidentiality incident notification and register apply.

MilestoneSep 22, 2021 · 5.1 years ago · Source

AssentBill 64 assented to as S.Q. 2021, c. 25.