Act 25 and Confidentiality Incidents – The first Draft Regulations… remain a draft!
On July 13, 2022, we informed you in our bulletin entitled Act 25 – First Draft Regulation, On Your Marks, Get Set, Go! that the first draft Regulation respecting confidentiality incidents (hereinafter the “Draft Regulations“) had been published and would come into force, with its corollary obligations, on September 22, 2022.
While the prescribed “commenting period” has passed, the Draft Regulations have not yet been confirmed. In other words, the Draft Regulations did not come into force on September 22, 2022. Notwithstanding, the sections addressing new obligations surrounding confidentiality incidents (sections 3.5 to 3.8) of the Act to modernize the legislative provisions as regards the protection of personal information (the “Act”), did.
The enactment of regulations surrounding confidentiality incidents therefore remains outstanding. However, this does not mean that you should not currently take steps to comply with your new obligations under the Act.
What should organizations do now?
Not all is lost – the subsequent proposed regulations will likely be relatively similar to the first set of Draft Regulations.
We therefore recommend that you take steps to comply with the new requirements surrounding confidentiality incidents, outlined in our previous publication, based on guidelines set out in the Draft Regulations, particularly as it relates to notifying concerned individuals of confidentiality incidents and developing your register of confidentiality incidents.
Taking such steps will ensure that your organization complies with the new requirements and will be prepared to quickly address any necessary adjustments once new regulations on confidentiality incidents come into force.
We will keep you informed of any further developments regarding regulations under the Act. Please contact a member of our Privacy and Data protection team if you have any questions regarding the Draft Regulations or Act 25.
by Candice Hévin and Marie-Eve Jean
A Cautionary Note
The foregoing provides only an overview and does not constitute legal advice. Readers are cautioned against making any decisions based on this material alone. Rather, specific legal advice should be obtained.
© McMillan LLP 2022
Insights (5 Posts)View More
Do You See What I See? Fake AI Cases Can Result in Real Contempt
Reliance on an AI hallucinated case in submissions to the court can constitute a breach of professional obligations and may amount to contempt.
Canada’s Fighting Against Forced Labour and Child Labour in Supply Chains Act: Where to next for companies?
Join subject matter experts from McMillan and Pillar Two for a webinar to support companies in addressing their forced labour, child labour and other modern slavery risks, and to support their reporting obligations under the Canadian Fighting Against Forced Labour and Child Labour in Supply Chains Act.
Why Extended Producer Responsibility and the Circular Economy Demand Boardroom Action
Discussion of global amendments to Extended Producer Responsibility (EPR) and right to repair laws, impacting product lifecycle management and regulatory compliance for businesses.
Québec’s Bill 96: Where we are now after four years and the road ahead
Join Enda Wong, Business Law, Shari Munk-Manel, Employment & Labour Relations, and Émile Catimel-Marchand, Financial Services and Regulatory as they discuss Bill 96, its impacts on the day-to-day operations of companies doing business in Québec, including in the areas of employment, contracting, product design, labelling and advertising.
Put Your Best Foot Forward: New Evidence Requirements for Trademark Appeals
Discussion of amendments to Canada's Trademarks Act impacting timing of delivery of evidence to the Trademark Opposition Board or later to the Federal Courts.
Get updates delivered right to your inbox. You can unsubscribe at any time.