Quebec Privacy Act Overview

Right to be Informed : Data subjects have the right to obtain the following information:

1. the personal information collected;
2. the purposes of collection of personal information;
3. the means by which information is collected;
4. the rights of access and rectification;
5. the right to withdraw consent to the communication or use of the personal information;
6. the categories of persons who have access to the information within the organization;
7. the duration for which the information will be kept; and
8. the contact information of the person in charge of protecting personal information.

Right to Access : Data subjects have the right to confirm that their personal information has been collected and request access to such information.

Right to Rectification and Deletion : Data subjects have the right to request rectification if their personal information is inaccurate, incomplete, or equivocal or if the collecting, communicating, or keeping of the information is not authorized by law.

Right to Deindexation and Re-indexation : Data subjects have the right to request for de-indexation of their personal information, also known as the right to be forgotten, if disseminating their personal information contravenes of law or court order. Likewise, the data subjects can require the re-indexation of their personal information subject to fulfillment of certain conditions.

Right to Data Portability : Effective 22 September 2024, the data subjects have the right to request for the computerized personal information collected from them to be communicated to them in a structured and commonly used technological format.

Right to Contest Automated Decision-making : Data subjects have the right to be informed of the fact that their personal information is used to render a decision based exclusively on automated processing and request further details regarding the automated decision-making. In addition, the data subjects also have the right to submit observations and contest the decision based exclusively on automated processing.