by Chantal Bernier, Sasha Coutu, Alexandra Quigley - JD Supra

Québec’s Bill 64, An Act to modernize legislative provisions as regards the protection of personal information, was adopted unanimously, on September 21, 2021, receiving assent on September 22, 2021. The clock has started running to prepare for its implementation in covered organizations. While most new provisions will come into effect only two years after assent, the organizational transformation they entail is significant and will require time and resources. To comply with Bill 64, organizations must: i) establish data governance processes, including ones to assist individuals in exercising new privacy rights, ii) develop corporate data management policies, iii) adopt technological solutions to de-index or transfer personal information upon request; and iv) issue internal guidelines to support staff and service providers in the implementation of the new privacy regime.