Skip to content
Experiencing a breach? Get help now
Cyberphore

Topic

Privacy Law and Breach Response

Canadian privacy law decides what an organization must do after a breach: when to report, who to notify and what records to keep. This hub follows PIPEDA, Quebec Law 25, provincial private sector laws and the decisions of privacy commissioners, with plain explanations of what each change requires.

In-depth
1
Briefings
0
Answers and terms
10

In-depth analysis

Essential Reading: Privacy Law and Breach Response

  • Analysis

    Quebec Law 25 in 2026: What the CAI's Enforcement Shows

    All of Quebec Law 25 has been in force since September 22, 2024. The Commission d'accès à l'information reported no administrative monetary penalties and no penal fines for its 2025 to 2026 fiscal year, but confidentiality incident notices and complaints keep rising, and its recent published decisions have ended in binding orders. The CAI says the law covers any business handling Quebecers' personal information.

    · 9 min read

Book free assessment