Law 25complianceguide
What is Law 25? A Complete Guide for Quebec Organizations
Everything you need to know about Law 25 in Quebec: obligations, deadlines, penalties, and practical steps to achieve compliance.
2026-03-23Read more
Resources
Blog
Practical guides and analysis on Law 25 compliance for Quebec organizations.
Law 25compliance
5 Common Mistakes in Law 25 Compliance
Organizations working toward Law 25 compliance often make the same mistakes. Here are the five most common ones, why they are a problem, and how to fix them.
2026-03-22Read more
Law 25e-commerce
Law 25 Compliance for Quebec Online Retailers
E-commerce generates personal information at every step of the customer journey. Here is what Law 25 requires in practice from Quebec online stores.
2026-03-22Read more
Law 25training
Employee Training on Law 25: Obligation or Best Practice?
Law 25 requires organizations to train their staff on personal information protection. Here is what this obligation covers, how to meet it, and how to document it.
2026-03-21Read more
Law 25rights
Personal Information Access Requests: Responding on Time
Law 25 gives individuals the right to access the personal information you hold about them. Here is how to handle these requests efficiently and within the required timeframes.
2026-03-19Read more
Law 25healthcare
Law 25 for Clinics and Healthcare Professionals
Health information is among the most sensitive personal data. Here is what Law 25 requires in practice from clinics and healthcare professionals in Quebec.
2026-03-17Read more
Law 25PIA
PIA: When and How to Conduct a Privacy Impact Assessment
When Law 25 requires a PIA, what it must cover, how to keep it practical, and the role of the privacy officer.
2026-03-13Read more
Law 25incidents
Privacy Incident Registry: What Law 25 Actually Requires
When to log an incident, how to assess severity, when to notify the CAI and affected individuals. What Law 25 actually requires.
2026-03-10Read more
Law 25compliance
Law 25 Compliance: Why a Spreadsheet Is No Longer Enough
Spreadsheets have their place, but Law 25 requires ongoing tracking that quickly outgrows them. Here is when a structured tool makes sense.
2026-03-06Read more
Law 25construction
Law 25 and Construction: Protecting Data on Job Sites
Law 25 compliance challenges specific to the construction sector: scattered data, staff turnover, subcontractor sharing, and physical documents on job sites.
2026-03-03Read more
Law 25consent
Consent and Law 25: What Changed for Personal Information Collection
What Law 25 requires on consent: validity, granularity, withdrawal rights, and documentation. A practical guide for Quebec organizations.
2026-02-24Read more
Law 25documentation
Privacy Policy: Writing Guide for Quebec SMBs
What a Law 25-compliant privacy policy must include, the most common gaps, and practical tips for writing in plain language.
2026-02-17Read more
Law 25governance
Privacy Officer: Role, Obligations, and Implementation
Who needs to designate a Privacy Officer under Law 25, what the role actually involves, and how to implement it effectively in your organization.
2026-02-10Read more
Law 25compliance
Understanding Law 25 Enforcement Mechanisms
How does the CAI enforce Law 25? A factual overview of investigation powers, administrative and penal sanctions, and personal liability under Quebec's privacy law.
2026-02-03Read more
Law 25complianceguide
Law 25 Compliance Assessment: Where to Start?
Not sure where to begin with Law 25? This practical guide walks through five concrete first steps to assess your situation and build an action plan.
2026-01-27Read more
Law 25compliance
The 7 Categories of Law 25 Obligations
Understanding the structure of Law 25 obligations helps you prioritize your compliance work. A plain-language breakdown of all 7 major categories.
2026-01-20Read more