What is an ÉFVP?

An évaluation des facteurs relatifs à la vie privée, or privacy impact assessment. Law 25 requires one in defined circumstances, including before communicating personal information outside Quebec, where the assessment has to consider the protection the receiving jurisdiction offers. For automation projects this is the step most often skipped, particularly for tools bought as features rather than chosen as projects, since nobody treats a software update as a decision.