01
Scope of application & addressees
- Businesses operating in Quebec and using personal information for automated decisions
- Organisations supplying credit, insurance, employment, pricing or eligibility systems
- Teams responsible for privacy notices, explanations, correction and human review
02
Core regulatory mandates & key requirements
01Tell the individual, no later than the decision, that it was based exclusively on automated processing.
02On request, disclose the personal information used, the reasons and the principal factors and parameters.
03Provide a correction route and an opportunity to make representations to a staff member able to review the decision.
03
Enforcement & compliance timeline
The privacy modernisation law received assent.
The automated-decision provisions entered into force.