On September 22, 2022, the first provisions of the Act to modernize legislative provisions respecting the protection of personal information came into force.
In June 2022, Cybereco published its practical guide on the application of the Act 25, which proposes a concrete action plan to help businesses understand and apply this law.
As part of our ongoing efforts to help Quebec businesses implement the new provisions, Cybereco and its members have prepared an appendix to the Guide to the Application of the Act 25 on Third Party Management to be prepared for the 2nd wave of provisions comes into force on 22 September 2023. This appendix will help you understand the new obligations and the actions to be taken in the context of a transfer of personal information to a provider or third party.
See the Appendix on Third Party Management (PDF)
Reminder: You can consult the tools previously created by Cybereco at any time:
- Template of the form for the delegation of the function of Privacy Officer*
- Template of an incident log.*
*These templates are offered as suggested models and do not replace the notices, documents and forms offered by your legal advisors or the Government of Quebec.
The Government of Quebec also publishes documents to inform and assist you in the application of this law. You can consult various documents, in particular (documents available in French only):
- Incident de confidentialité – Détails pour la transmission d’avis et la tenue d’un registre
- Modèle de registre des incidents de confidentialité du Gouvernement du Québec
- Modèle d’avis à la personne concernée par un incident de confidentialité causant un préjudice sérieux
- Avis à la Commission d’accès à l’information (CAI) concernant un incident de confidentialité
- Formulaire de dépôt d’une entente de communication de renseignements personnels à des fins d’étude, de recherche ou de production de statistiques
- Formulaire de déclaration d’un système biométrique ou procédé permettant de saisir des caractéristiques ou des mesures biométriques
- Modèle de formulaire de consentement à la collecte, à l’utilisation et à la conservation de renseignements biométriques
- Exemple de formulaire de consentement (biométrie) adapté par une entreprise fictive