Quebec CEOs Will Need To Serve As Default Privacy Officers Under Bill 64

As of Sept. 22, 2022, those conducting business in Quebec must comply with the first set of obligations pursuant to the Bill 64 amendments to Quebec's Act respecting the protection of personal information in the private sector ("Quebec Privacy Act" or "Law 25"). This is the first in a series of articles on the forthcoming Sept. 22, 2022 requirements.

Has your CEO been advised that by default, the person with the highest authority within an organization acts as the person in charge of the protection of personal information and is responsible for compliance with the Quebec Privacy Act? It is important for organizations familiar with the federal private sector privacy legislation, PIPEDA, to note that this default to the person with highest authority departs from the existing PIPEDA requirement to designate a person responsible for compliance. Nevertheless, the Quebec Privacy Act provides that this role may be delegated, in whole or in part, in writing to