Marketing and data collection from children
Organizations targeting children must:
- Obtain meaningful parental consent before collecting personal information from under-13 users.
- Provide age-appropriate notices in language children can understand.
- Minimize data collection and retention.
- Disable profiling and behavioural advertising by default for users under 18.
Schools and ed-tech
Schools must vet ed-tech vendors to ensure equivalent privacy protection under the applicable provincial public-sector law.
Cross-border data transfers require additional assessment under Quebec's Law 25.
Children's images online
Posting images of identifiable children online generally requires parental consent. Quebec's de-indexing rights are particularly strong for children.