Express consent for sensitive personal information
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 22 September 2023.
A sensitive categories rule binding private bodies.
As of 24 September 2026.
What it requires
- Treat personal information as sensitive when, due to its nature, in particular a medical, biometric or otherwise intimate nature, or the context of its use or communication, it carries a high level of reasonable expectation of privacy.
- Obtain the person's express consent, not an inferred or bundled one, before using sensitive personal information for a new purpose or communicating it to a third person.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Personal information is sensitive, for the purposes of this Act, if due to its nature, in particular its medical, biometric or otherwise intimate nature, or the context of its use or communication, it entails a high level of reasonable expectation of privacy.
Consent to use sensitive personal information for a purpose other than the one for which it was collected, and consent to communicate sensitive personal information to a third person, must each be given expressly rather than being inferred from conduct or a general privacy notice.
When LexLint raises it
processes_biometricsprocesses_voice
Read the law
official consolidated statute text, LégisQuébec (Éditeur officiel du Québec)
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.