Québec's Act to modernize legislative provisions as regards the protection of personal information (Law 25), which came into force on September 22, 2021, requires that organizations that collect, use or store personal information have a governance program to ensure the protection of this information.
To achieve this, covered entities must adopt policies, methodologies, procedures, as well as data capture and data management tools to implement this governance program.
You must identify a person in charge of the protection of personal information so as to fulfil your obligations under Law 25. These include:
Our experts know the ins and outs of Law 25 and will assist you in drafting the required policies, methodologies and procedures.
In addition, they will guide you towards technological solutions for automating the creation of personal information files and controlling your processing activities.
Our unique approach combines technology and professional expertise without the additional cost of an internal resource.
In order to comply with current legislation, your organization must have a mapping system, which is the basis for protecting personal information.
To ensure your organization complies with Law 25, you must take several elements including cookie management into account.
Contrary to what many believe, Law 25 in respect of personal information also applies to SMEs. What are your obligations?
Does your organization make decisions based exclusively on automated information processing? Law 25 provides guidelines regarding these practices.
Law 25 on the protection of personal information has just been enhanced with the right to data portability. Is your organization in compliance?
Your organization is required to comply with Law 25 and implement an information governance program. What exactly are your obligations?
