Share on LinkedInShare on LinkedIn

ARTICLE · 06 FEBRUARY 2026

Preventing Confidentiality Incidents: New CAI Guidance

McCarthy Tétrault
McCarthy Tétrault
Contributor
McCarthy Tétrault

McCarthy Tétrault

Built on a unique model of collaboration, innovation and efficiency, McCarthy Tétrault delivers...

View firm profile
Explore more from McCarthy Tétrault

Preventing confidentiality incidents (i.e., the term used under Quebec law for privacy breaches) is not only a legal obligation in Quebec, but also an essential component of sound risk management and corporate governance.

CanadaPrivacy

Preventing confidentiality incidents (i.e., the term used under Quebec law for privacy breaches) is not only a legal obligation in Quebec, but also an essential component of sound risk management and corporate governance. On January 30, 2026, Quebec's privacy regulator, the Commission d'accès à l'information ("CAI"), published new guidance on the prevention of confidentiality incidents, including a step‑by‑step Guide that sets out the CAI's prevention approach and a complementary Checklist intended to help operationalize it.

Released as part of Data Protection Week 2026, the guidance provides operational direction for businesses subject to Quebec's private-sector privacy law, the Act respecting the protection of personal information in the private sector ("Private Sector Act"). Note that the guidance is only available in French.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from