Sources / Press and newsletters

Quebec private sector Act, section 17: privacy impact assessment before communicating information outside Quebec

9 records were read from this source, dated 18 Oct 2026.

Open it on publicationsduquebec.gouv.qc.ca

Its permanent copy is being made in the Wayback Machine.

Last checked 18 Oct 2026

What was read from it

Records read from this source
Record	Kind	As stated	Dated
For customers or staff in Canada, has each person consented to this new use, or will the data be anonymised to the Canadian standard before it leaves? For Quebec, is the privacy impact assessment done and the written agreement ready?	Rights question	The data is anonymised to the regulator's standard (no serious possibility of…	18 Oct 2026
Quebec private sector Act, section 12: use for another purpose needs consent or an exception (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 12, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))	Law or ruling	In Quebec any use beyond the purpose of collection needs consent unless an exception…	18 Oct 2026
Quebec private sector Act, section 12: de-identified information is still personal information (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 12, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))	Law or ruling	In Quebec, removing direct identifiers makes information de-identified, not anonymous:…	18 Oct 2026
Quebec private sector Act, section 13: communicating personal information to a third person needs consent (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 13, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))	Law or ruling	Licensing records that contain personal information to a US buyer is a communication to…	18 Oct 2026
Quebec private sector Act, section 14: consent must be clear, free, informed and specific (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 14, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))	Law or ruling	A general privacy notice does not carry a licence to an AI buyer in Quebec: the holder…	18 Oct 2026
Quebec private sector Act, section 17: privacy impact assessment before communicating information outside Quebec (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 17, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))	Law or ruling	A Quebec holder must run a privacy impact assessment before communicating personal…	18 Oct 2026
Quebec private sector Act, section 18.4: the commercial transaction exception (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 18.4, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))	Law or ruling	The exception lets an enterprise share personal information without consent only to…	18 Oct 2026
Quebec private sector Act, section 23: when information is anonymized (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 23, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))	Law or ruling	Quebec's anonymization standard is irreversible, at all times, for direct and indirect…	18 Oct 2026
Quebec private sector Act, section 21: communication without consent for study, research or statistics (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 21, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))	Law or ruling	Quebec's research route needs a written request, a privacy impact assessment that finds…	18 Oct 2026

For customers or staff in Canada, has each person consented to this new use, or will the data be anonymised to the Canadian standard before it leaves? For Quebec, is the privacy impact assessment done and the written agreement ready?
Kind
Rights question
As stated
The data is anonymised to the regulator's standard (no serious possibility of…
Dated
18 Oct 2026
Quebec private sector Act, section 12: use for another purpose needs consent or an exception (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 12, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))
Kind
Law or ruling
As stated
In Quebec any use beyond the purpose of collection needs consent unless an exception…
Dated
18 Oct 2026
Quebec private sector Act, section 12: de-identified information is still personal information (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 12, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))
Kind
Law or ruling
As stated
In Quebec, removing direct identifiers makes information de-identified, not anonymous:…
Dated
18 Oct 2026
Quebec private sector Act, section 13: communicating personal information to a third person needs consent (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 13, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))
Kind
Law or ruling
As stated
Licensing records that contain personal information to a US buyer is a communication to…
Dated
18 Oct 2026
Quebec private sector Act, section 14: consent must be clear, free, informed and specific (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 14, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))
Kind
Law or ruling
As stated
A general privacy notice does not carry a licence to an AI buyer in Quebec: the holder…
Dated
18 Oct 2026
Quebec private sector Act, section 17: privacy impact assessment before communicating information outside Quebec (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 17, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))
Kind
Law or ruling
As stated
A Quebec holder must run a privacy impact assessment before communicating personal…
Dated
18 Oct 2026
Quebec private sector Act, section 18.4: the commercial transaction exception (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 18.4, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))
Kind
Law or ruling
As stated
The exception lets an enterprise share personal information without consent only to…
Dated
18 Oct 2026
Quebec private sector Act, section 23: when information is anonymized (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 23, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))
Kind
Law or ruling
As stated
Quebec's anonymization standard is irreversible, at all times, for direct and indirect…
Dated
18 Oct 2026
Quebec private sector Act, section 21: communication without consent for study, research or statistics (Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, s. 21, as amended by S.Q. 2021, c. 25 (in force 22 September 2023))
Kind
Law or ruling
As stated
Quebec's research route needs a written request, a privacy impact assessment that finds…
Dated
18 Oct 2026