A holiday gift: The Regulation respecting confidentiality incidents[1] came into force on December 29, 2022[2], with few changes to the draft proposed last June.[3] The Regulation is part of Québec’s privacy law reform implemented by Law 25.[4] On September 22, 2022, the provisions[5] concerning the mandatory incident register and reporting of those with a risk of serious injury took effect. The Regulation establishes the content of the register and specifies the terms of notification concerning these requirements.
For more information on the content of the Regulation, see our bulletin on the subject here.
As of September 22, 2023, a company or public body’s failure to report a confidentiality incident to the Commission d’accès à l’information or to the persons concerned may be subject to the following penalties:
