Regulations › Rest of world › Quebec, Canada
Law 25
Quebec Law 25 (Act to modernize legislative provisions as regards the protection of personal information)
WhenIn effect since 22 September 2022
Who enforces itCommission d'accès à l'information du Québec
Who it applies toOrganizations handling personal information of people in Quebec.
Tell the regulatorPromptly notify the Commission d'accès à l'information of incidents presenting a risk of serio…
DPO requiredThe person with highest authority in every enterprise is by default the person in charge of pe…
RegistrationNot addressed
Transfers abroadBefore communicating data outside Quebec, conduct a PIA confirming adequate protection and sig…
Request deadlineReply in writing promptly and within 30 days
Maximum finePenal fines up to CAD 25 million or 4% of worldwide turnover
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws