⁦Quebec Law 25⁩

⁦Quebec, Canada⁩ الخصوصية

الحالة

⁦In force; amendments phased in Sep 2022, Sep 2023 (main wave) and Sep 2024 (data portability).⁩✓المصادر: ⁦cai.gouv.qc.ca⁩, ⁦dww.com⁩

على من ينطبق

⁦Enterprises that collect, hold, use or communicate personal info in the course of carrying on business in Quebec.⁩

حدود الحجم

⁦No size or revenue thresholds; applies to any enterprise handling personal info.⁩✓المصادر: ⁦legisquebec.gouv.qc.ca⁩, ⁦cai.gouv.qc.ca⁩

الجهة الرقابية

⁦Commission d⁩'⁦accès à l⁩'⁦information du Québec (CAI)⁩✓المصادر: ⁦legisquebec.gouv.qc.ca⁩, ⁦cai.gouv.qc.ca⁩

الإبلاغ عن الخروقات أو الحوادث

⁦Notify the CAI and affected persons promptly of any confidentiality incident that presents a risk of serious injury; keep an incident register and give it to the CAI on request. The Act sets no fixed number of days.⁩✓المصادر: ⁦legisquebec.gouv.qc.ca⁩, ⁦cai.gouv.qc.ca⁩, ⁦dww.com⁩

مهلة الرد على طلبات البيانات الشخصية

⁦Respond to access or rectification requests within 30 days of receipt; no answer in time counts as a refusal. Data portability in a structured, commonly used format available since 22 Sep 2024.⁩✓المصادر: ⁦legisquebec.gouv.qc.ca⁩, ⁦cai.gouv.qc.ca⁩, ⁦cai.gouv.qc.ca⁩

مسؤول حماية البيانات

⁦The person with the highest authority (e.g., CEO) is by default the person in charge of protecting personal information; may delegate in writing. Title and contact details must be published on the website.⁩✓المصادر: ⁦cai.gouv.qc.ca⁩, ⁦dww.com⁩

الممثل المحلي

قيد التحقق

نقل البيانات إلى الخارج

⁦Before communicating personal info outside Quebec (including to other provinces), complete a privacy impact assessment; transfer only if it shows adequate protection, and put a written agreement in place (since Sep 2023).⁩✓المصادر: ⁦legisquebec.gouv.qc.ca⁩, ⁦cai.gouv.qc.ca⁩

ملفات تعريف الارتباط والموافقة

⁦Before collecting, tell people about any technology that identifies, locates or profiles them (e.g., ad cookies) and how to activate it; these functions must be off by default. Public tech products must use the highest privacy settings by default, except cookie settings.⁩✓المصادر: ⁦legisquebec.gouv.qc.ca⁩, ⁦cai.gouv.qc.ca⁩, ⁦clydeco.com⁩

أقصى عقوبة

⁦Administrative monetary penalties up to C$10M or 2% of worldwide turnover (whichever is greater); penal fines up to C$25M or 4% of worldwide turnover for enterprises (C$5,000-C$100,000 for individuals).⁩

المعلومات الموسومة بعبارة «قيد التحقق» لا تزال قيد التأكيد ولا تُقدَّم كإجابات.

ما يجب عليك فعله

• ⁦Designate and publish the person in charge of personal information (default: the CEO).⁩
• ⁦Adopt and publish governance policies and a plain-language privacy policy.⁩
• ⁦Do a privacy impact assessment before sending personal info outside Quebec and sign a written agreement.⁩
• ⁦Report confidentiality incidents with risk of serious injury to the CAI and affected people; keep an incident register.⁩
• ⁦Disclose use of identification, location or profiling technologies and how to turn them on.⁩
• ⁦Tell people when a decision is made solely by automated processing and explain it on request.⁩
• ⁦Provide personal info in a portable, structured format on request.⁩

التغييرات الأخيرة

⁦Final phase (data portability right) took effect 22 Sep 2024. CAI can now impose administrative monetary penalties and pursue penal fines under the amended Act.⁩✓

المصادر

• المصدر الأساسي: ⁦https://www.cai.gouv.qc.ca/protection-renseignements-personnels/sujets-et-domaines-dinteret/principaux-changements-loi-25⁩
• المصدر الثاني: ⁦https://www.clydeco.com/en/insights/2023/09/law-25-quebec-s-second-wave-of-new-privacy-amendme⁩
• الجهة الرقابية: ⁦Commission d⁩'⁦accès à l⁩'⁦information du Québec (CAI)⁩

✓ = مؤكَّد من مصدرين مستقلين، أحدهما على الأقل رسمي. كيف نتحقق

معلومات فقط، وليست استشارة قانونية. القوانين تتغير؛ تحقّق مع الجهة الرقابية أو محامٍ مؤهل قبل الاعتماد على هذه الصفحة. هل لاحظت خطأ؟ راسلنا على ⁦contact@⁩⁦glancedeskjurisdiction.com⁩.