Quebec National Assembly Enacts Law Protecting Consumer Financial Data and Digital Sovereignty

QUEBEC CITY, QC — The National Assembly of Quebec unanimously voted to pass Bill 48, establishing the Quebec Digital Financial Sovereignty and Consumer Data Protection Act, introducing rigorous consumer consent and local server residency requirements for commercial fintech applications.

Strengthening Consumer Protections in Digital Banking

The statute mandates that commercial banks, credit bureaus, and automated fintech lending apps obtain granular, unbundled opt-in consent before sharing consumer transaction records with third-party advertisers or automated credit-scoring algorithms. The law grants Quebec consumers the statutory right to erase digital financial footprints and imposes fines up to 4% of worldwide turnover for non-compliant corporations.

Provincial digital governance ministers emphasized that consumer data is a private asset that must be shielded from predatory algorithmic scoring and unauthorized monetization.

Fintech Coalition Stances and Privacy Commissioner Oversight

The Canadian Fintech Association worked with lawmakers to formulate technical API interoperability standards.

The Commission d'accès à l'information (CAI) established a dedicated enforcement bureau to audit commercial financial algorithms.

Statutory Enforcement Date

The digital financial data sovereignty provisions enter into binding legal force on January 15, 2027.