Share on LinkedInShare on LinkedIn

ARTICLE · 07 NOVEMBER 2024

New Security Incident Reporting Obligations For Certain Financial Institutions In Québec

Torys
Torys
Contributor
Torys

Torys

Torys LLP is an international business law firm that works with clients who expect the best advice...

View firm profile
Explore more from Torys

On October 23, 2024, Québec's Autorité des marchés financiers (AMF) published the Regulation respecting the management and reporting of information security incidents by certain financial institutions.

CanadaFinance and Banking

On October 23, 2024, Québec's Autorité des marchés financiers (AMF) published the Regulation respecting the management and reporting of information security incidents by certain financial institutions and by credit assessment agents (the Regulation). The Regulation, which comes into force on April 23, 2025, will impose obligations on certain financial institutions to manage, report and maintain records of information security incidents.

What you need to know

  • Scope: The Regulationapplies to certain financial institutions regulated by existing Québec legislation.
  • New obligations:
    • Institutions must put in place an information security incident management policy and designate an individual responsible for its oversight.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from