On September 22, 2022, the first provisions of the Act to modernize legislative provisions respecting the protection of personal information came into force.
Last June, Cybereco published its practical guide on the application of Act 25, which proposes a concrete action plan to help businesses understand and apply this law.
In order to assist Quebec businesses in implementing the new provisions, Cybereco and its members have prepared a model form for the delegation of the function of Privacy Officer and a model for an incident register.
Form for the delegation of the function of Privacy Officer (Cybereco)
Confidentiality incident Log (Cybereco)
These templates are offered as suggested models and do not replace the notices, documents and forms offered by your legal advisors or the Government of Quebec.
The Government of Quebec also publishes documents to inform and assist you in the application of this law. You can consult various documents, in particular (documents available in French only):
- Incident de confidentialité – Détails pour la transmission d’avis et la tenue d’un registre
- Modèle de registre des incidents de confidentialité (Gouvernement du Québec)
- Modèle d’avis à la personne concernée par un incident de confidentialité causant un préjudice sérieux
- Avis à la Commission d’accès à l’information (CAI) concernant un incident de confidentialité