Last review date: 18 December 2024
Yes.
Last review date: 18 December 2024
Yes.
If yes, under what circumstances?
☒ other
Under Canadian private-sector data privacy and cybersecurity laws, organizations are generally required to designate an individual or individuals who are accountable for the organization's compliance with applicable private-sector data privacy and security laws. In Quebec, this responsibility defaults to the person exercising the highest authority within the organization. However, an individual must also be appointed as a privacy officer to ensure that an organization complies with the Quebec Act.
Last review date: 18 December 2024
No.
Last review date: 18 December 2024
Yes.
Under the Quebec Act, every "personal information agent" carrying on an enterprise in Quebec must register with the Quebec CAI by filing an application in accordance with prescribed requirements. Under the Quebec Act, a "personal information agent" is any person who, on a commercial basis, personally or through a representative, establishes files on other persons and prepares and communicates to third parties credit reports bearing on the character, reputation or solvency of the persons to whom the information contained in such files relate. The Quebec CAI must register an agent who files an application in conformity with the prescribed requirements. Upcoming amendments to the Quebec Act include updated "personal information agent" provisions including a requirement for the agent to notify the Quebec CAI within 30 days of any changes to personal and contact information (e.g., name, address, telephone, etc.) and to establish and implement within its enterprise rules of conduct related to the access, protection and rectification of personal information.