On Monday, April 28, members of Dentons’ Privacy and Cybersecurity team hosted a webinar examining the fast-changing legal landscape surrounding biometric information in Canada, with a particular focus on Québec’s distinct regulatory framework. Led by Kirsten Thompson, Partner and National Lead of the Privacy and Cybersecurity group, and Alexandra Quigley, Senior Associate in our Montréal office, the session provided timely insights into the increasing use of biometric technologies such as facial recognition, fingerprint scanning, and voiceprint authentication, and outlined the legal responsibilities organizations must address.

Key takeaways included:

• Biometric data is sensitive by definition and generally requires express, informed consent under both federal and provincial privacy laws.
• In Québec, organizations must notify the Commission d’accès à l’information (CAI) before implementing biometric systems or databases and provide individuals with clear alternatives for identification.
• The CAI’s decision prohibiting a retailer’s use of facial recognition to prevent shoplifting emphasizes the importance of demonstrating necessity, proportionality, and privacy-respecting design.
• Across Canada, the OPC’s draft guidance reinforces the need for privacy impact assessments (PIAs), minimal data collection, limited retention, and strong safeguards.
• We also discussed emerging litigation trends, including early-stage class actions related to biometric misuse and intrusive technologies.
• Best practices include testing alternatives, documenting your rationale for biometric use, and ensuring transparency in how data is collected and used.

Thank you to everyone who attended. If you have any questions or would like to learn more about compliance obligations, risk mitigation strategies, or best practices for using biometric data in Canada and Québec, please reach out to a member of our Privacy and Cybersecurity team.

Download a copy of the presentation slides.

Additional resources

The Dentons Data blog provides insight and commentary on the legal aspects of the digital revolution affecting businesses. Subscribe here for the latest updates and trends.

For further resources on the topics discussed, please see below:

• Dentons Data - Biometrics in Québec: Regulator continues to set high bar for use by retailers
• Dentons Data - La biométrie au Québec : La barre est haute pour les détaillants
• Dentons Data – Artificial intelligence in the workplace: Legal framework and important considerations
• Dentons Data – L’intelligence artificielle au travail : Considérations importantes et encadrement juridique
• Dentons Data – Is it necessary? New CAI recommendations on staff recruitment and privacy
• Dentons Data – Est-ce nécessaire? – Nouvelles recommandations de la CAI à propos du recrutement de personnel et le respect de la vie privée

Moderator and speaker:

Kirsten Thompson, Partner, Toronto

Speaker:

Alexandra Quigley, Senior Associate , Montréal

Accreditation

• LSBC: This session is registered for 60 Substantive minutes with the Law Society of British Columbia.
• LSO: This program is eligible for up to 60 Substantive minutes with the Law Society of Ontario.
• Barreau du Québec: In our view, this session would meet the CLE requirements of the Barreau du Québec. Please email Annie Girard to receive a confirmation of attendance.

Questions

If you have any questions, please contact dentonscanada.events@dentons.com.