Binding law — in force
Exclusively-automated decisions require notice, explanation, and human review (Quebec)
Under Quebec Law 25 (s. 12.1 of the private-sector privacy Act), an enterprise that uses personal information to render a decision based exclusively on automated processing must inform the person no later than when it communicates the decision, and on request disclose the personal information used, the reasons and principal factors/parameters, and the right to correct the data — and must give the person an opportunity to submit observations to a staff member able to review the decision. Applies to Quebec residents' data wherever the controller sits; French-language notice required. Detect a solely-automated significant-decision path with no ADM notice, explanation-on-request, correction, or human-review affordance.
qc-law25.automated-decision-inform-and-review · Act respecting the protection of personal information in the private sector (CQLR c P-39.1), s. 12.1 · official source · jurisdictions: CA-QC