ACTA Reminding Industry Of Changes In Quebec Privacy Laws
ACTA is reminding the industry that Québec travel businesses and travel companies operating in Québec must comply with new privacy laws next year.
Travel businesses with operations, employees, or markets in Québec are required to comply with new data privacy rules outlined in Quebec Law 25 by Sept. 2024. Quebec Law 25 (Act respecting the protection of personal information in the private sector) updates the existing privacy regime in the province.
All travel businesses which are based elsewhere, but have employees in Québec, or serve markets and customers in the province must also comply.
ACTA will provide information on its website this Fall to help Members understand the new requirements and take the required actions to comply with the law. In addition, ACTA is working with a partner in Québec to plan and deliver a webinar to further assist Members.
The Québec government explains that Law 25 modernizes the province’s privacy legislation, and is part of a shift underway in Canada to widen the privacy landscape.
In addition to meeting current privacy obligations in Québec, here are examples of what travel businesses will be required to do during the transition period (2021-2024):
- Designate a person responsible for the protection of personal information.
- Report privacy incidents involving personal information that poses a risk of serious harm.Notify the Commission d’accès à l’information before using any biometric technique to verify or confirm an individual’s identity.
For more, here are some helpful links:
- Québec government backgrounder and checklist with actions required 2021-2024: https://www.cai.gouv.qc.ca/documents/CAI_Guide_obligations_entreprises_vf.pdf
- Commission d’accès à l’information website dedicated to this law and transition for business: https://www.cai.gouv.qc.ca/
To contact ACTA, go to www.acta.ca .
