TORONTO — ACTA has issued a reminder about new privacy laws coming into effect next year that apply to Quebec travel businesses and travel companies.

Travel businesses with operations, employees or markets in Quebec are required to comply with new data privacy rules outlined in Quebec Law 25 by September 2024. According to the Quebec government, Law 25 modernizes the province’s privacy legislation, and is part of a shift underway in Canada to widen the privacy landscape. 

All travel businesses that are based elsewhere but have employees in Quebec, or serve markets and customers in the province must also comply.

To help members better understand the new requirements, ACTA will be providing information on its website this fall. In addition, it’s working with a partner in Quebec to plan and deliver a webinar to further assist members.

WHAT IS REQUIRED?

In addition to meeting current privacy obligations in Quebec, here are examples of what travel businesses will be required to do during the transition period (2021-2024):

• Designate a person responsible for the protection of personal information
• Report privacy incidents involving personal information that poses a risk of serious harm
• Notify the Commission d’accès à l’information  before using any biometric technique to verify or confirm an individual’s identity 

For more information go to https://www.cai.gouv.qc.ca/documents/CAI_Guide_obligations_entreprises_vf.pdf and https://www.cai.gouv.qc.ca/.