Privacy & Law 25
Manage your privacy obligations with end-to-end support. We adapt your processes and contracts, draft plain-language policies and train your teams, so that the personal information of your clients and employees is protected.
Law 25 support
Becoming compliant
Bringing your organization in line with the rules and with your contracts. Managing information protection with your service providers.
Policies and procedures
Policies and procedures drafted in plain language, for your employees and your clients.
Support for your officer
Seven-day-a-week support for the person in charge of the protection of personal information.
Staff training
Training your employees, freelancers and partners in sound data protection practices.
Impact assessments
For your data transfers outside Quebec and your digital projects involving personal information.
Confidentiality incidents
Assistance with a confidentiality incident and with the serious injury assessment.
What you need to know
Who is covered?
Every enterprise and public body that collects, uses or discloses personal information in Quebec. That includes self-employed workers, startups, non-profits and associations.
Main objectives
Guaranteeing the right to privacy, regulating the collection and use of personal information, and setting security standards. Transparency and consent are the pillars.
Penalties and risks
Fines can reach $25 million or 4% of worldwide turnover. Directors and officers can be held personally liable, with fines of up to $100,000.
Frequently asked questions
What is Law 25?
Quebec legislation that protects the personal information of individuals handled by Quebec organizations, private or public.
What information is protected?
Any information that makes a person identifiable: name, phone number, email, health data, IP address, consumption habits, opinions.
Who must appoint a privacy officer?
Every organization must appoint a person responsible for the protection of personal information. By default, it is the person with the highest authority.
Are foreign companies covered?
Yes. Any company that collects information about individuals residing in Quebec is subject to Law 25.
Our approach
We support you at every stage of your Law 25 compliance work: from the initial audit to the training of your teams, by way of drafting your policies.
Our service includes privacy impact assessments (PIA) and assistance in the event of a confidentiality incident.
What is included
- Law 25 compliance review
- Tailored privacy policies
- Staff training
- Seven-day-a-week privacy officer support
- Incident handling
- Privacy impact assessments (PIA)
Ready to comply with Law 25?
Book a compliance review with our lawyers.
Book an appointment
Redirecting to our booking system...