Québec Law 25 private-sector privacy act

Required actions

Inform individuals when a decision is based exclusively on automated processing, and on request explain the personal information and principal factors used and allow observations - Complete a privacy impact assessment for systems that collect, use or share personal information - Inform people when technology that identifies, locates or profiles them is used and how to deactivate it

Sources

legisquebec.gouv.qc.cahttps://www.legisquebec.gouv.qc.ca/en/document/cs/P-39.1

Contribute

Spot an error, or know a record we should add? Members can propose additions and submit corrections.

Add regulation Report a correction or request removal

Related in Regulation Tracker

Ontario Working for Workers Four Act, 2024 — AI disclosure in job postings

Since January 2026 Ontario employers with 25 or more staff must disclose in job postings whether AI is used to screen or assess applicants, Canada's first binding AI-in-hiring rule.

CanadaIn force

Canada Artificial Intelligence and Data Act

Canada's proposed AI law died on the order paper when Parliament was prorogued in January 2025, leaving the country with privacy law, a voluntary generative AI code and a new AI ministry.

CanadaWithdrawn

Canada Artificial Intelligence and Data Act (Part 3 of Bill C-27)

Canada's proposed AI law, part of the privacy reform Bill C-27, died when Parliament was prorogued in January 2025. Canada has no comprehensive AI statute; AI is governed by privacy law, sector regulators and the…

CanadaExpired

Québec Law 25 — private-sector privacy act with automated-decision duties