Law 25: What You Need to Know Before You Start
A practical 9-step guide to understand your obligations and take action, without legal jargon.
Why this guide exists
Since Law 25 (Act to modernize legislative provisions as regards the protection of personal information) came into force, every Quebec business, regardless of size, must put specific measures in place to protect the personal information it holds.
This guide was designed specifically for small and medium-sized businesses that want to understand their obligations without legal jargon, and take action quickly with ready-to-use templates.
This guide is for you if you are:
How to use this guide
This guide is divided into 9 steps. For each step, you will find:
What is personal information?
Personal information is any information that can identify a person, directly or indirectly. This includes, for example:
Important: Even a single piece of data (like an email address) can be considered personal information if it can identify a person.
Why compliance is essential
Respect the law
Avoid financial penalties of up to $25 million
Protect your reputation
Avoid incidents that break your customers' trust
Save time
A clear system prevents mistakes and simplifies access requests
The 9 steps to compliance
Ready to take action?
Get every template mentioned in this guide, ready to fill in with your information.
Get the Complete Kit