Act respecting the protection of personal information in the private sector, highest confidentiality by default
In force since .
A comprehensive regime rule binding private bodies.
- Obligation class
- Design code
- Audit expectation
- none
What it requires
- If you collect personal information while offering the public a technological product or service that has privacy settings, set those settings to the highest level of confidentiality by default, without any step by the person concerned (s. 9.1).
- This default does not extend to privacy settings for browser cookies (s. 9.1).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
Section 9.1 requires privacy settings to provide the highest level of confidentiality by default. It names no log, register or record, sets no period, and says nobody may demand a record, so no logging duty is found.
- Kind
- None
- As of
What this law does
Any person carrying on an enterprise who collects personal information when offering to the public a technological product or service having privacy settings must ensure that those settings provide the highest level of confidentiality by default, without any intervention by the person concerned. The duty does not apply to privacy settings for browser cookies.
When LexLint raises it
When your app profile says your app processes personal data, ships a mobile app or operates a social platform.
Back to the example · Lint your app
Page updated .