Canada: Consultation closes on Draft Regulation for new requirements under Bill 64

On 13 August 2022, the public consultation on the draft regulation issued by the Government of Quebec providing clarifications on the notification and record-keeping requirements outlined in Bill 64 closed. The draft aims to provide further guidance regarding the actions entities have to take in case they suffered from a confidentiality incident. Firstly, the entities will have to report data breaches that pose a risk of serious injury to the data holder, to the Commission on Access to Information and notify the data holders. Secondly, according to the draft entities will have to conduct a risk assessment based on the type of data they store and notify the authorities of their preventive security measures. Finally, the entities will have to include all the data breaches in a public register. The requirements if adopted will come into force on 22 September 2022.