December 05, 2024 - Private Sector, Quebec

The Québec AMF’s new information security incident reporting regime: what financial institutions need to know

Effective April 23, 2025, certain financial institutions will be subject to new information security incident management and disclosure obligations under the Québec Autorité des marchés financiers (AMF) Regulation respecting the management and reporting of information security incidents by certain financial institutions and by credit assessment agents (AMF Regulation).

Click here to read an overview of the key obligations of the AMF Regulation prepared by our National Privacy and Data Management team.