In 2021, Quebec adopted a series of significant amendments, including much higher penalties for contraventions, to its main privacy law governing personal information that retailers handle.
These new requirements are coming into force in stages over the next several years to give organizations time to transition. The first set of rules will begin applying in September 2022. These include new rules on what to do when personal information is shared when it should not be (confidentiality incident) and designating a staff member to oversee privacy, as well as handling personal information from human characteristics like voice and face (biometrics). View September 2022 rules.
The Quebec privacy commission has an online hub for information to help businesses transition to new requirements. These include the 2-page summary of the new rules that will apply starting this September (see link above), as well as Quebec guidance generally. View Quebec privacy guidance webpage.
For more information on the entire law’s key requirements and enforcement provisions, see law firm Borden Ladner Gervais’ compliance guide.
For questions or more information contact
Kate Skipton
Senior Policy Analyst, Government Relations
kskipton@retailcouncil.org
416 467-3744
