Bill 25 (ex Bill 64),The Privacy Legislation Modernization Act, which is intended to modernize Quebec's privacy laws by introducing significant new data protection rights to individuals and increasing the obligations for public and private organizations that handle personal information of employees, will enter into force by September 22, 2023.
Some provisions affecting employers will be effective on September 22, 2022, including:
- The duty to report a privacy breach to the Commission 'd'accès à 'l'information as well as the persons concerned depending on the seriousness of the confidentiality incident.
- The obligation to designate a privacy officer who should know the nature of the personal information that your company holds, processes and communicates. They should also know who can access this personal information and on what grounds.
Failure to comply with these obligations will expose your organization to significant penalties, up to a maximum of $25 million or four per cent of your worldwide revenues.