On September 22, 2024, the fourth wave of amendments to Québec’s Act respecting the protection of personal information in the private sector(“Act”) will take effect. Arguably, the most important change it will introduce is...more
With the first wave of amendments to Québec’s personal information protection legislation (“Law 25”) taking effect on September 22, 2022, we thought we would share the top 5 misconceptions we have encountered when discussing...more
7/5/2023
/ Breach Notification Rule ,
Canada ,
Cloud Storage ,
Consent ,
Cyber Incident Reporting ,
Data Collection ,
Data Protection ,
Disclosure Requirements ,
Incident Response Plans ,
New Amendments ,
Personal Information
The bulk of the “Law 25” amendments to Québec’s Act Respecting the Protection of Personal Information in the Private Sector (“PPIPS”) take effect on September 22, 2023. In a previous post, we discussed the internal policies...more
The second wave of “Bill 64” amendments to Québec’s private-sector privacy legislation – the Act respecting the protection of personal information in the private sector (“PPIPS”) – will take effect on September 22, 2023. In...more
As the new year begins, we thought we would focus on three laws (two laws and one bill, actually) and two decisions that will most certainly affect the privacy landscape for Canadian businesses in 2023....more
With the first wave of amendments to Québec’s An Act Respecting the Protection of Personal Information in the Private Sector (“PPIPS”) having taken effect just over a month ago, we thought we would share some misconceptions...more
With the first wave of amendments to Québec’s personal information protection legislation (“Law 25”) taking effect on September 22, 2022, we thought we would share the top 5 misconceptions we have encountered when discussing...more
A little over nine months after it passed An Act to modernize legislative provisions as regards the protection of personal information (“Bill 64”) overhauling, among other legislation, the province’s public and private sector...more
On June 14, 2022, the Government of Canada introduced Bill C-26, An Act Respecting Cyber Security which, among other things, seeks to enact the Critical Cyber Systems Protection Act (“CCSPA”). The “Backgrounder” that...more
Companies using Google Analytics (“Analytics”) or similar platforms may be interested in recent rulings of several European data protection authorities that found Analytics data transfers to the U.S. to be non-compliant with...more
4/6/2022
/ Analytics ,
Canada ,
CNIL ,
Data Protection ,
Electronic Data Transmissions ,
EU ,
FISA ,
General Data Protection Regulation (GDPR) ,
Google ,
International Data Transfers ,
Personal Data ,
Schrems I & Schrems II ,
Standard Contractual Clauses
How will the Reform affect companies' privacy practices? What are the main differences between the Act and PIPEDA? -
On September 21, 2021, the National Assembly adopted Bill 64, an Act to modernize legislative provisions...more
On December 3, 2021, Québec’s Minister of Health and Social Services introduced Bill 19, An Act respecting health and social services and amending various legislative provisions (“Bill 19”). The bill’s four objectives are (i)...more
3/18/2022
/ Canada ,
Consumer Privacy Rights ,
Data Collection ,
Data Management ,
Data Protection ,
Healthcare ,
PHI ,
Proposed Legislation ,
Proposed Regulation ,
Regulatory Agenda ,
Regulatory Reform ,
Social Services