Changes to privacy laws in Quebec with regards to anonymising personal information

At a glance

• Quebec’s private sector privacy legislation provides that once the purposes for which personal information has been collected or used are achieved, organisations have two choices: (1) destroy the personal information; or (2) anonymise it for use only in connection with 'serious and legitimate purposes'.
• The 'Regulation respecting the anonymization of personal information' (Anonymisation Regulation) sets out a process requiring organisations to take several steps before, during and after anonymising personal information.
• This Anonymisation Regulation came into force on 30 May 2024, with the exception of the obligation to record the prescribed information in a register, which will come into force on 1 January 2025.