In recent years, technological advances have led to a sudden
digitization of daily life and, consequently, of personal
information. More than ever, data, including personal information,
has become a commodity used to predict individuals' behaviour.
"[I]n an era in which data is constantly flowing across
borders and geographic boundaries and significant economic activity
relies on the analysis, circulation and exchange of personal
information,"1 it is increasingly necessary to
regulate this digital revolution to allow organizations and
individuals to benefit from its undeniable advantages while
limiting the potential privacy risk.
Over the past five years, legislators have been working to
change the legal framework that applies to personal information.
Europe led the way in 2016 with the General Data
Protection Regulation
("GDPR"), and California followed suit
in 2018 with the California Consumer Protection
Act ("CCPA"). Quebec and
Canada are not far behind.
