Andy Nagy Andy Nagy

Québec’s anonymization requirements one year later: lessons and lingering questions for businesses

We examine key questions that remain one year later regarding the regulation’s scope and application and practical steps to achieve compliance.

Québec’s privacy regulator prohibits retailer’s use of facial recognition for loss prevention

On February 18, 2025, the Commission d’accès à l’information du Québec (the CAI) issued a decision prohibiting a major grocery and pharmacy...

Québec privacy commissioner continues to set high bar for biometric data processing: lessons for businesses

Québec privacy regulators continue enforcement action against companies that use facial recognition and other biometric identification technologies.

Privacy and data-related law reform to continue in 2025

A growing array of privacy and data obligations are being introduced in sector-specific and other legislative proposals.

Completing the Law 25 puzzle: insight into the right to data portability

Starting September 22, 2024, the final Law 25 amendments to the Act Respecting the Protection of Personal Information in the Private Sector (the...