How Does Law 25 Protect Your Data?
On September 22, 2022, the Commission d'accès à l'information brought into effect Law 25. This new law aims to reform the protection of personal information in the private and public sector, to better adapt to today’s digital environment.
New Responsibilities for Businesses
Some of the new obligations for businesses include:
- Designate a responsible person for the protection of personal information. The person’s title and contact information must appear on the company’s website
- Keep a record of incidents and take prompt action to reduce the risk of harm. The Commission and the persons concerned must be notified in the event of an incident
- Disclose to the Commission the verification and confirmation of identity made by biometric characteristics or measurements
- Respect the new framework for the communication of personal information without the consent of the person concerned in a commercial transaction or for the purposes of study, research or producing statistics
The changes made by Law 25 will come into effect gradually until 2024. At Victoire Events and Web, CEO Patrick Gagnon is responsible for the protection of personal information.
This text does not constitute legal advice.
Source: https://www.quebec.ca/nouvelles/actualites/details/loi-25-nouvelles-dispositions-protegeant-la-vie-privee-des-quebecois-certaines-dispositions-entrent-en-vigueur-aujourdhui-43212
