A law that significantly updates Quebec's privacy framework, adding requirements like the appointment of privacy officers and data protection impact assessments.