Quebec launches digital ID and cybersecurity overhaul

Summary#

• This Quebec law creates a national digital identity system and puts the Minister of Cybersecurity and Digital in charge of it. The goal is to let people access government services online more easily and safely, using trusted digital proofs.

• It also strengthens government cybersecurity, sets rules for how public bodies share core identity data, and allows pilot projects to offer digital court services.

• Key changes:

  • Sets up a national digital identity and a secure app where people can store government “digital attestations” (digital proofs like name, age, or status).
  • Says people cannot be forced to use the digital identity to get government services.
  • Creates a government-run registry to store and share core identity data across public bodies, with audit logs and a ban on profiling.
  • Requires public bodies to use the minister’s identity and some cybersecurity services (with some exceptions), and to report serious cyber incidents.
  • Lets the Justice Minister run time‑limited pilots that adjust court rules to offer digital judicial services.
  • Expands the minister’s role over government telecom infrastructure and certain specialized technologies.

What it means for you#

• Residents

  • You can use a voluntary digital identity to log in to government services and share digital proofs when needed. You must still be able to get services without it.
  • Your core identity info (like name and date/place of birth) will be managed in a secure registry used by public bodies. Access to this data is tracked.
  • The government cannot use the registry to build profiles about you (for example, your health, preferences, or behavior).
  • The government may later allow some biometric data (like a face scan) for identity checks, but it must first consult the public and set rules.
  • If a public body has a serious breach that could harm you, it must quickly alert the Minister. This aims to speed up response and protection.

• Businesses and organizations

  • You may see more trusted digital proofs from customers or clients, which can speed up identity checks.
  • If you own or operate essential systems or infrastructure, the government can make breach‑notification rules apply to you.
  • Expect more online court services during pilot projects, which may change how filings or appearances work.

• Public servants and public bodies

  • You must use the minister’s identity services and, in many cases, the minister’s cybersecurity services, unless exempt.
  • You must use the official data sources and the identity registry to get, use, and share core identity data.
  • You must report serious cyber incidents to the Minister and may be asked to complete security analyses of systems.

• Property owners

  • People designated by the Minister can access property at reasonable times to survey or prepare telecom projects that support government connectivity. They must fix any damage caused.

• Court users

  • Some civil or penal procedures may run through digital tools during pilot projects. Pilots can last up to three years and be extended once.

• Internet and connectivity users

  • The minister will coordinate government telecom infrastructure and can build and run a non‑commercial connectivity network for the state. This is meant to improve reliability of government operations and services.

Expenses#

No publicly available information.

Proponents' View#

• Gives people one secure way to access services and share trusted digital proofs, cutting paperwork and wait times.
• Protects privacy by banning profiling, tracking access to data, and consulting the public before using biometrics.
• Improves data quality and consistency across public bodies, which can reduce errors and fraud.
• Speeds up cybersecurity response through mandatory incident reporting and shared cybersecurity services.
• Coordinates telecom infrastructure for the state, which can lower duplication and improve reliability.
• Tests digital court services through pilots, which can improve access to justice for many users.

Opponents' View#

• Centralizing identity data may increase privacy and security risks if there is a major breach.
• Although use is optional, setting usage targets and standardizing services could pressure people to use the system, leaving out those without devices or digital skills.
• Allowing biometrics, even with rules, raises concerns about surveillance and misuse.
• Letting officials access private property for telecom work may worry owners about disruption, despite the duty to repair damage.
• Implementation may be costly and complex, with risks of vendor lock‑in or technology failures.
• Letting the Justice Minister change court procedures for pilots could unsettle legal safeguards or create uneven access during trials.