ACTA has issued a reminder that travel businesses with operations, employees, or markets in Québec are required to comply with new data privacy rules outlined in Quebec Law 25 by SEP 2024.
Quebec Law 25 (respecting the protection of personal information in the private sector) reforms the existing privacy regime in the province. Travel businesses based outside of Québec, but which have employees in the province or serve its markets and customers, must also comply.
googletag.cmd.push(function() { googletag.display('div-gpt-ad-1665769905662-0'); });
ACTA said it intends to establish information on its website this Fall to help members understand the new requirements and take the required actions to comply with the law.
In addition, ACTA is working with a partner in Québec to plan and deliver a webinar to assist members further. The Québec government explains that Law 25 modernizes the province's privacy legislation and is part of a shift in Canada to widen the privacy landscape.
What will businesses be required to do?
In addition to meeting current privacy obligations in Québec, here are examples of what travel businesses will be required to do during the transition period (2021-2024):
• Designate a person responsible for the protection of personal information.
• Report privacy incidents involving personal information that pose a risk of serious harm.
• Notify the Commission d'accès à l'information before using any biometric technique to verify or confirm an individual's identity.
Further information can be found here:
• Québec government backgrounder and checklist with actions required 2021-2024: https://www.cai.gouv.qc.ca/documents/CAI_Guide_obligations_entreprises_vf.pdf
• Commission d'accès à l'information website dedicated to this law and transition for business: https://www.cai.gouv.qc.ca
