Data communicated outside Quebec
Law 25 requires a privacy impact assessment before personal information is communicated outside Quebec. The assessment considers, among other things, the sensitivity of the information, the protection measures and the legal framework that applies where it will be communicated.