California Drafts Regulations to Implement the California Privacy Rights Act Imposing New Compliance Requirements for Businesses

On July 8, 2022, the California Privacy Protection Agency (“CPPA”)1 published draft regulations in the California Regulatory Notice Register (“Draft Regulations”)2 mandated by the California Privacy Rights Act (“CPRA”).3 The Draft Regulations amend prior regulations adopted under the California Consumer Privacy Act (“CCPA”) to provide additional rights to consumers in their personal information and expand the obligations of […]
Read more

Law 25 – CAI’s Enforcement – What’s first?

What will the CAI Enforcement Priorities be? Bill 64, also known as the Act to Modernize Legislative Provisions Respecting the Protection of Personal Information, was introduced by the Quebec government to update privacy laws and strengthen the protection of personal information. It aims to align the province’s legislation with modern challenges in data protection and […]
Read more

Québec’s Law 25 and Privacy By Design: 5 Things to Remember When Configuring Information Systems

The bulk of the “Law 25” amendments to Québec’s Act Respecting the Protection of Personal Information in the Private Sector (“PPIPS”) take effect on September 22, 2023. In a previous post, we discussed the internal policies and practices these amendments require. This post focusses on four information systems configurations Québec businesses must respect to comply with Law […]
Read more

Heightened Privacy Obligations for Public Bodies in British Columbia

Amendments to British Columbia’s Freedom of Information and Protection of Privacy Act (FIPPA) taking effect on February 1, 2023, will impose more stringent privacy requirements on provincial public bodies, such as hospitals, municipalities and crown corporations, and numerous agencies, boards and commissions. By way of background, FIPPA regulates, among other things, how public bodies in British Columbia […]
Read more

An Evolving Digital Privacy Landscape—Comparing the Federal Bill C-27’s CPPA to Quebec’s Bill 64

Introduction The Act to modernize legislative provisions as regards the protection of personal information[1] (“Bill 64”) received royal assent on September 22, 2021, introducing amendments to the privacy regime and the framework governing the use and collection of personal information (“PI”) by public and private sector privacy laws in Quebec. Meanwhile, on June 16, 2022, the federal […]
Read more