On September 21, Québec’s Bill 64, An Act to modernize legislative provisions as regards the protection of personal information, passed, and the date of assent was September 22, 2021. Most of the provisions come into force two years after the date of assent, with a few exceptions where some provisions become effective in one year.
General Data Protection Regulation (GDPR)
Canada's banking regulator recently updated its Technology and Cyber Security Incident Reporting requirements for financial institutions to disclose and report cybersecurity incidents. And, for the first time since 2013, it updated its Cyber Security Self-Assessment tool.