تُرجمت هذه الصفحة وتم التحقق منها آليًا. النسخة الإنجليزية هي المرجع. بعض الأجزاء لا تزال بالإنجليزية ريثما يتم التحقق من ترجمتها. عرض بالإنجليزية · الإبلاغ عن خطأ في الترجمة
Law 25
Quebec Law 25 (قانون تحديث الأحكام التشريعية المتعلقة بحماية المعلومات الشخصية)
أكثر قوانين الخصوصية صرامة في كندا، مع تقييمات لأثر الخصوصية على عمليات النقل وغرامات بمستوى GDPR.
The law in brief
Quebec's Law 25 modernized the province's private-sector privacy law, the Act respecting the protection of personal information in the private sector. Phased in from 2022 to 2024, it is the strictest privacy regime in Canada: it requires a person in charge of privacy, privacy impact assessments, incident registers and reporting, privacy by default, transparency about automated decisions, and an assessment before personal information leaves Quebec.
Its penalties are at GDPR scale, and individuals can sue for punitive damages.
على من يسري
- Enterprises that collect, hold, use or communicate personal information about individuals in Quebec in the course of carrying on an enterprise, including organizations outside Quebec.
- Quebec's public bodies are covered by a parallel law with similar changes.
- Personal information is any information that relates to a natural person and allows them to be identified, directly or indirectly.
What it requires
A person in charge of privacy
The person with the highest authority in the enterprise is responsible for protecting personal information and may delegate the role in writing; their title and contact details must be published.
Incident register and reporting
Take reasonable measures to reduce the risk of injury from a confidentiality incident, keep a register of all incidents, and promptly notify the Commission and affected persons where there is a risk of serious injury.
Privacy impact assessments
Conduct an assessment for any project to acquire, develop or overhaul an information system involving personal information, and before communicating personal information outside Quebec.
Consent and privacy by default
Obtain consent that is manifest, free, enlightened and given for specific purposes, express for sensitive information, and set technology products to the highest level of confidentiality by default.
Automated decisions
Inform people when a decision about them is based exclusively on automated processing, and on request tell them the information and main factors used and let them submit observations.
حقوق الأفراد
Individuals can access and correct their information, withdraw consent, obtain a copy in a structured, commonly used technological format (portability, since September 2024), ask for de-indexation of information in certain cases, and be informed of and comment on decisions based exclusively on automated processing.
Enforcement and penalties
عقوبات مالية إدارية تصل إلى C$10 مليون أو 2% من حجم الأعمال العالمي، وغرامات جزائية تصل إلى C$25 مليون أو 4%، أيهما أعلى، تفرضها لجنة الوصول إلى المعلومات. ويجوز للأفراد رفع دعاوى، مع تعويضات عقابية لا تقل عن C$1,000 عن الانتهاكات المتعمدة أو الناجمة عن إهمال جسيم.
What to do first
- Confirm the person in charge of privacy (the chief executive by default, delegable in writing) and publish their title and contact details.
- Publish governance policies on how you handle personal information, in clear terms on your website.
- Run privacy impact assessments for new information systems and before communicating information outside Quebec.
- Keep a confidentiality incident register and report incidents with a risk of serious injury.
- Set the most private settings by default for technology products and services.
- Tell people about automated decisions and let them submit observations.
Checked against the official text on 28 September 2026. Quotations are the operative words of the law, linked to the article they come from; the official text is the authority. This brief is written by the Association for practitioners and is not legal advice.
المستجدات الأخيرة
لم يُبلَّغ عن شيء بعد. تعرض Regulatory Watch القواعد الجديدة وإجراءات الإنفاذ وأحكام المحاكم فور صدورها.
المصادر
تجري إضافة المصادر الأولية إلى هذا المدخل.
مكتبة التشريعات
جميع قوانين الخصوصية في الولايات الأمريكية على خريطة واحدة
لدى 24 ولاية قانون شامل للخصوصية في المكتبة، إلى جانب قوانين الاتحاد الأوروبي والمملكة المتحدة والقوانين الاتحادية الأمريكية والقوانين العالمية: 102 قانونًا إجمالًا، كل منها مشروح بلغة واضحة مع مصادره. اختر ولاية لمعرفة ما يسري فيها.
- ساري
- يدخل حيز التنفيذ
- القوانين القطاعية