{"id":36798,"date":"2024-04-02T14:00:33","date_gmt":"2024-04-02T14:00:33","guid":{"rendered":"https:\/\/mssolutions.ca\/?p=36798"},"modified":"2024-04-02T19:04:29","modified_gmt":"2024-04-02T19:04:29","slug":"the-10-most-frequently-asked-questions-about-bill-25","status":"publish","type":"post","link":"https:\/\/mssolutions.ca\/en\/blogue\/cybersecurite-en\/the-10-most-frequently-asked-questions-about-bill-25\/","title":{"rendered":"The 10 most frequently asked questions about Bill 25"},"content":{"rendered":"\t\t
Bill 25, also known as the \u201cAct modernizing legislative provisions relating to the protection of personal information\u201d, aims to strengthen the protection of the personal information of Quebec citizens. It applies to any organization that collects, uses or discloses personal information, including businesses, government agencies and not-for-profit organizations.<\/p>
Bill 25 introduces several important changes, including:<\/span>:<\/p> Each organization is responsible for implementing Bill 25 within its activities. This means that each organization must adopt policies and procedures to ensure that it meets the requirements of the Act.<\/p> Organizations that fail to comply with Bill 25 face penalties of up to $20 million or 2% of their annual revenue, whichever is greater.<\/p> You can find more information about Bill 25 on the Commission d’access \u00e0 l’information du Qu\u00e9bec (CAI)<\/a> website.<\/p> Bill 25 covers all information that allows a person to be identified, including their name, address, telephone number, email address, social insurance number, credit card number, etc. It also targets sensitive information, such as health information, political opinions and religious beliefs.<\/p> Consent must be free and informed. This means that the person must be informed of the nature of the personal information you collect, how you will use it and to whom you will communicate it. You must also obtain the individual’s consent before using their personal information for purposes other than those for which it was collected.<\/p> You must implement technical and organizational security measures to protect the personal information you collect. These measures may include:<\/p> In the event of a privacy incident, you must first assess the severity of the incident and the risk of harm to those affected. If the risk of harm is serious, you must notify the CAI within 72 hours. You should also take steps to limit the damage caused by the incident.<\/p> To meet the requirements of Bill 25, MS Solutions<\/a> has developed, in partnership with the Delegatus<\/a> law collective, a complete solution<\/a> supporting both the cybersecurity and legal aspects of compliance. This collaboration has given rise to a robust offering that effectively supports companies in their regulatory compliance process.<\/p> .At the heart of our proposition, we offer a toolbox integrated into SharePoint. This turnkey solution contains all the regulatory elements necessary for the first two phases of implementation of Bill 25. Our goal is to simplify the compliance process and provide our clients with a user-friendly and practical tool.<\/p> We are particularly proud to share that our solution was distinguished for its excellence and innovative nature. In fact, we were selected as finalists in the Technological Innovation category at the prestigious Mercuriades 2024<\/a> in Quebec. This recognition highlights the effectiveness and relevance of our approach to meeting the compliance needs of businesses in a constantly evolving context.<\/p>
The right to erasure: Individuals have the right to request erasure of their personal information in certain circumstances.<\/li>Who is responsible for implementing Bill 25?<\/strong><\/h3>
What are the sanctions for non-compliance with Bill 25?<\/strong><\/h3>
Where can I find more information about Bill 25?<\/strong><\/h3>
What types of personal information are covered by Bill 25?<\/strong><\/h3>
How can I obtain consent from an individual for the collection, use or disclosure of their personal information?<\/strong><\/h3>
What steps should I take to protect the personal information I collect?<\/strong><\/h3>
What should I do in the event of a privacy incident?<\/strong><\/h3>
Are there solutions to comply with Bill 25?<\/strong><\/h3>