On September 22, 2022, the first set of amendments from Bill 64, specifically to Quebec’s Act respecting the protection of personal information in the private sector (Quebec Privacy Act) will come into force. Although most amendments will come into force in September 2023, we wanted to highlight some key new obligations for all enterprises who […]
On July 6, 2022, Derek Lackey and David McInerney conducted a coffee session to discuss the new documentation obligations for organizations of all sizes and types under Bill 64. These new data protection & privacy laws require all organizations to DOCUMENT and PROVE their compliance with the law. As most organizations have not been required […]
June 8, 2022 @ 11:00AM EST Sections 3.5 – 3.8 of the revised ACT RESPECTING THE PROTECTION OF PERSONAL INFORMATION IN THE PRIVATE SECTOR require all organizations who use personal data and maintain a National database in Canada to implement a security and privacy breach reporting plan, complete with a log of all breaches. This […]
On May 18, 2022 David McInerney of Syrenis and I openingly discussed the requirement to managing consent introduced by Bill 64. With new data protection and privacy laws being passed in many jurisdictions around the world (including Bill 64 in Quebec), organizations choosing to use personal information to personalize their marketing efforts must be able […]
We can all help the CRTC enforce CASL. Report all of your spam messages to spam@fightspam.gc.ca. If we all forward our spam to the Spam Reporting Centre, the bad actors will pop up like tall poppies. The CRTC will know who to investigate for what and fines/undertakings/violations will follow when appropriate. Here are the Enforcement […]
The GDPR requires organizations to protect personal data in all its forms. It also changes the rules of consent and strengthens people’s privacy rights. In this article, we’ll explain how to ensure GDPR email compliance. Email users send over 122 work-related emails per day on average, and that number is expected to rise. While we may […]
Privacy compliance was once a straightforward process of checking the right boxes — not much more than adequate consents and a privacy policy on a website — but that world no longer exists. We are in the midst of a global explosion of legislation governing data. With potential overlaps and even clashes between laws, as […]
There are 98 Sections to the ACT RESPECTING THE PROTECTION OF PERSONAL INFORMATION IN THE PRIVATE SECTOR that were impacted by the passing of Bill 64 in September of 2021. Some are similar to obligations within PIPEDA, but these obligations will be strongly enforced by the CAI in Quebec. As it was written back in 1999, […]
As a Privacy Professional it has been somewhat frustrating trying to sort out the new privacy landscape defined by Quebec’s Bill 64. The Bill itself makes changes to 21 different Acts, but the Act for the Private Sector (ACT RESPECTING THE PROTECTION OF PERSONAL INFORMATION IN THE PRIVATE SECTOR or PPIPS) and the Public Bodies […]
Quebec passed Bill 64 in September 2021, dramtically updating the Act Respecting the Protection of Personal Information in the Private Sector (“PPIPS”). Just as the California Consumer Privacy Act (2018) set a new National standard for the US, Quebec has set a new privacy standard for Canada. Most organizations who operate in Canada cannot have […]