top of page

Law 25:
What you need to know

This new law amends certain provisions of the Act respecting the protection of private information in the private sector.

Effective as of September 22, 2023:

  • Each company will have to develop, establish andimplement a privacy policyto provide for practices governing its governance with respect to the protection of personal information. Detailed information about this policy should be posted on the company's website;

  • The company that collects personal information must inform the person concerned of the purposes necessary for this collection and use the personal information only in connection with this purpose;

  • Bill 25 adds a system of financial administrative penalties applicable in the event of a breach by a company of an obligation imposed on it by the Act, which may go up to a sum of $10,000,000 or an amount corresponding to 2% of the turnover. global business; And

  • Criminal penalties are also increased, up to $25,000,000 or an amount equal to 4% of the company's worldwide revenue.

Effective as of September 22, 2023:

  • Each company will have to develop, establish andimplement a privacy policyto provide for practices governing its governance with respect to the protection of personal information. Detailed information about this policy should be posted on the company's website;

  • The company that collects personal information must inform the person concerned of the purposes necessary for this collection and use the personal information only in connection with this purpose;

  • Bill 25 adds a system of financial administrative penalties applicable in the event of a breach by a company of an obligation imposed on it by the Act, which may go up to a sum of $10,000,000 or an amount corresponding to 2% of the turnover. global business; And

  • Criminal penalties are also increased, up to $25,000,000 or an amount equal to 4% of the company's worldwide revenue.

Effective as of September 22, 2023:

  • Each company will have to develop, establish andimplement a privacy policyto provide for practices governing its governance with respect to the protection of personal information. Detailed information about this policy should be posted on the company's website;

  • The company that collects personal information must inform the person concerned of the purposes necessary for this collection and use the personal information only in connection with this purpose;

  • Bill 25 adds a system of financial administrative penalties applicable in the event of a breach by a company of an obligation imposed on it by the Act, which may go up to a sum of $10,000,000 or an amount corresponding to 2% of the turnover. global business; And

  • Criminal penalties are also increased, up to $25,000,000 or an amount equal to 4% of the company's worldwide revenue.

L’intimée 9049 était représentée par Me Guillaume Lemieux et Me Anne-Clara Girard-Tremblay. Nous vous invitons à les contacter pour toutes questions en matière de droit pénal et environnemental.

  

MISE EN GARDE : Cette publication a pour but de donner des renseignements généraux sur des questions et des nouveautés d’ordre juridique à la date indiquée. Les renseignements en cause ne sont pas des avis juridiques et ne doivent pas être traités ni invoqués comme tels.

​

​​

​

​

​

Après avoir constaté que la peine imposée n’était pas conforme à la loi, le Tribunal l’a rectifiée en annulant purement et simplement l’ordonnance de réhabilitation du 14 novembre 2022.

​

bottom of page