top of page

Law 25:
What you need to know

This new law amends certain provisions of the Act respecting the protection of private information in the private sector.

Effective as of September 22, 2023:

  • Each company will have to develop, establish andimplement a privacy policyto provide for practices governing its governance with respect to the protection of personal information. Detailed information about this policy should be posted on the company's website;

  • The company that collects personal information must inform the person concerned of the purposes necessary for this collection and use the personal information only in connection with this purpose;

  • Bill 25 adds a system of financial administrative penalties applicable in the event of a breach by a company of an obligation imposed on it by the Act, which may go up to a sum of $10,000,000 or an amount corresponding to 2% of the turnover. global business; And

  • Criminal penalties are also increased, up to $25,000,000 or an amount equal to 4% of the company's worldwide revenue.

Effective as of September 22, 2023:

  • Each company will have to develop, establish andimplement a privacy policyto provide for practices governing its governance with respect to the protection of personal information. Detailed information about this policy should be posted on the company's website;

  • The company that collects personal information must inform the person concerned of the purposes necessary for this collection and use the personal information only in connection with this purpose;

  • Bill 25 adds a system of financial administrative penalties applicable in the event of a breach by a company of an obligation imposed on it by the Act, which may go up to a sum of $10,000,000 or an amount corresponding to 2% of the turnover. global business; And

  • Criminal penalties are also increased, up to $25,000,000 or an amount equal to 4% of the company's worldwide revenue.

Effective as of September 22, 2023:

  • Each company will have to develop, establish andimplement a privacy policyto provide for practices governing its governance with respect to the protection of personal information. Detailed information about this policy should be posted on the company's website;

  • The company that collects personal information must inform the person concerned of the purposes necessary for this collection and use the personal information only in connection with this purpose;

  • Bill 25 adds a system of financial administrative penalties applicable in the event of a breach by a company of an obligation imposed on it by the Act, which may go up to a sum of $10,000,000 or an amount corresponding to 2% of the turnover. global business; And

  • Criminal penalties are also increased, up to $25,000,000 or an amount equal to 4% of the company's worldwide revenue.

La demanderesse CRT Construction inc. était représentée par Me Michel Bernier, associé chez GBV avocats.  

 

Nous précisons que le délai d’appel de cette décision n’est pas encore échu.

 

MISE EN GARDE : Cette publication a pour but de donner des renseignements généraux sur des questions et des nouveautés d’ordre juridique à la date indiquée. Les renseignements en cause ne sont pas des avis juridiques et ne doivent pas être traités ni invoqués comme tels.

bottom of page