As of September 22nd, 2023, the new Quebec privacy law will enforce the article 63.5 that reads as follows:
A public body must carry out a privacy impact assessment of any project to acquire, develop or overhaul an information system or electronic service delivery involving the collection, use, disclosure, retention or destruction of personal information.