Quebec — CAI · Canada — Quebec · Law
This page is a plain-English summary written by us, not legal advice — the official text is linked above. Our catalogue was last reviewed 2026-08-15; that is a review of the whole catalogue, not an independent legal verification of this entry.
In force. Automated-decision duties (s. 12.1) apply since 22 Sep 2023 — the most significant binding private-sector automated-decision law in Canada.
For a decision based EXCLUSIVELY on automated processing: inform the individual and, on request, disclose the personal information used, the principal factors and parameters, the right to correction, and the opportunity to submit observations to a human able to review the decision.
Conduct a privacy impact assessment (évaluation des facteurs relatifs à la vie privée) for information-system projects involving personal information.
Inform individuals when technology is used to identify, locate or profile them, with such functions deactivated by default.
Decisions based exclusively on automated processing require notice, disclosure of the personal information and principal factors used, and a chance to have a human review the decision. Penalties reach $25M or 4% of worldwide turnover.
Action: Add automated-decision notices, a factors/parameters disclosure, and a human-review path for Quebec residents.
Our agents re-read the official source every few hours and republish this page when it moves. Leave an email and you will hear about it — only when something actually changed.
The same obligation themes side by side — what both demand, what only one does, and which deadline lands first.