社团指南

Quebec Law 25 and Automated Decisions

Quebec’s private-sector privacy law requires notice when a decision is based exclusively on automated processing of personal information.

  • 3 分钟阅读
  • 最后更新
在本页3 分钟阅读
  1. 概述
  2. 深入探讨
  3. 战略影响
  4. The Future of Quebec Law 25 and Automated Decisions
  5. 现实世界的实施
  6. 风险与防护栏
  7. 实施路线图
  8. 不断探索
  9. 常见问题

概述

On request, a person can obtain the information used, principal reasons and factors, and an opportunity to submit observations to staff who can review the decision.

深入探讨

Law 25 amended Quebec’s Act respecting the protection of personal information in the private sector. Section 12.1 applies when an enterprise uses personal information to render a decision based exclusively on automated processing. It must inform the person no later than when it communicates the decision. On request, it must provide the personal information used, the reasons and principal factors and parameters that led to the decision, and the right to have the information corrected. The person must also be given an opportunity to present observations to a staff member able to review the decision. The right is not limited to a particular industry, but it is tied to private-sector processing and decisions made exclusively by automated means. A system that merely provides an estimate may still be relevant if the enterprise uses that output to make the final decision without meaningful human review. A nominal human click should not be assumed to change the character of the process. Organizations should document who actually decides, what information and factors were used, how the explanation is produced, and whether the reviewer has authority and ability to change the outcome. Section 8.1 separately requires advance notice when personal information is collected using technology with functions that identify, locate, or profile a person. It also requires explaining the means available to activate those functions. Profiling includes collecting and using information to evaluate characteristics such as work performance, economic situation, health, preferences, interests, or behavior. This transparency duty is distinct from Section 12.1’s automated-decision notice and explanation. Other Law 25 duties, including privacy impact assessments for certain projects and transfers outside Quebec, may also apply. A business should map the decision process, identify whether it is exclusively automated, provide timely notice, and prepare a meaningful response path. Preserve the factors and information used at the decision time so a later explanation is accurate. Build correction and human-review procedures that can change a mistaken result.

战略影响

风险与安全

灾难性和日常的人工智能危害都取决于谁了解风险以及谁能够采取行动。

更清晰的判决

公众和专业素养决定强有力的安全政策在政治上是否可行。

打破炒作

清晰的解释可以减少炒作、实验室公关和模糊道德剧场的影响。

The Future of Quebec Law 25 and Automated Decisions

Quebec’s Commission d’accès à l’information may publish guidance and decisions clarifying application. Businesses should review current statutory text and regulator materials, especially when adding automated scoring, workplace analytics, or location and profiling functions. Keep French-language notices and workflows current and test that staff can retrieve decision records during the response period. The Commission d’accès à l’information may clarify how the statute applies to new decision systems. Review current guidance and case decisions when introducing workplace analytics, scoring, or new profiling features, and keep response procedures available in French.

现实世界的实施

An insurer tells a customer when an exclusively automated decision is made and explains the information and factors used on request.

A business gives a person a chance to present observations to staff with authority to reconsider an automated result.

A retailer provides advance notice before collecting data through profiling technology.

A product team distinguishes Section 8.1 collection notice from Section 12.1 decision notice.

风险与防护栏

  • 将存在风险视为科幻小说,同时能力复合。

  • 混淆了表面产品安全与高度自治下的对准。

  • 只给非英语和非专业观众留下低质量的资源。

实施路线图

  1. 单独的产品危害、误用和失控/失调风险。

  2. 询问哪些证据会改变您对时间表和严重性的看法。

  3. 比起营销主张,更喜欢主要来源和具体评估。

  4. 确定一条行动路径:职业、政策、资金或技能——而不仅仅是意识。

不断探索

Free newsletter

Get the daily AI briefing

Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.

One email each weekday. Unsubscribe in one click. We never sell or share your address.

Test yourself

Take the Quebec Law 25 and Automated Decisions quiz

Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.

开始测验

Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation

常见问题

What is Quebec Law 25 and Automated Decisions?

Quebec’s private-sector privacy law requires notice when a decision is based exclusively on automated processing of personal information. On request, a person can obtain the information used, principal reasons and factors, and an opportunity to submit observations to staff who can review the decision.

When must a Quebec enterprise notify a person under Section 12.1?

Section 12.1 sets notice timing at communication of the decision.

What can a person request about the automated decision?

The statute lists information used and principal factors and parameters.

What human-review opportunity must be offered?

Section 12.1 provides for observations to a staff member who can review.

Which example can fall within the statute’s definition of profiling?

The definition includes evaluating characteristics such as performance and behavior.

Does a nominal approval click automatically make a decision non-automated?

The organization should examine who actually decides and whether review can affect the outcome.