An update on new Québec confidentiality incidents and record-keeping requirements

On June 29, 2022, the Québec provincial government proposed the long-awaited regulations clarifying the new notification and record-keeping requirements for confidentiality incidents under Bill 64 (Confidentiality Incidents Regulation). Québec becomes the third jurisdiction to introduce these obligations for organizations that sustain confidentiality incidents, after the Alberta Personal Information Protection Act (PIPA) in 2010 and the federal Personal Information Protection and Electronic Documents Act (PIPEDA) in 2018. These new requirements come into force in Québec on September 22, 2022.

In our article, we first provide a summary of the new legal requirements pertaining to the management of confidentiality incidents provided under Bill 64, followed by a summary of the recently published Confidentiality Incidents Regulation clarifying the new notification and record-keeping requirements.

Read our article available on BLG’s website

This content has been updated on July 21, 2022 at 11 h 05 min.