Law 25 consultant for SMEs and non-profits in Quebec
Is your business really compliant with Law 25?
Don't let grey areas put your organization at risk.
Robin Boucher helps you identify your gaps, prioritize corrections and put in place the practices needed to protect personal information.
- Assessment of your current practices
- Action priorities tailored to your organization
- Hands-on support across Quebec
A free 30-minute assessment to understand your needs and determine the next steps.
Robin Boucher
Governance, risk and compliance consultant
Sound familiar?
Your documentation is incomplete
No up-to-date privacy policy, no incident log, a privacy officer appointed on paper only. You don't know exactly what is missing.
Your documents aren't applied
The policies exist, but nobody follows them day to day. Your teams don't know what to do with an access request or an incident.
Your risks are unknown
Suppliers, transfers outside Quebec, sensitive data, cloud tools: you don't know where your real weak points are.
What you get
Compliance assessment
Identify the obligations already covered and the gaps to correct
Deliverable: Gap analysis and prioritized action plan
Implementation support
Move from recommendations to procedures actually in place
Deliverable: Procedures in place, clear roles, trained teams
Documentation
Get policies and registers adapted to how your organization works
Deliverable: Tailored policies, registers and procedures
Ongoing compliance
Update your practices as your business and its risks evolve
Deliverable: Periodic follow-up and updates
Do your needs go beyond Law 25?
Robin Boucher can also help you clarify your actual information security needs and, if required, refer you to technical cybersecurity services.
Why Robin Boucher
Founder of Robin Boucher Consultation, Robin Boucher helps Quebec organizations protect their personal information and information assets. He combines technical expertise with a solid grasp of regulatory requirements, in a concrete, simple, plain-language approach.
His goal: useful measures, proportionate to the risks and aligned with your business objectives, rather than a pile of documents nobody applies.
When a question requires a formal legal interpretation or opinion, he refers it to his own partner lawyer.
See his LinkedIn profile- ISO/IEC 27001 Lead Implementer certifiedThe international standard for information security management.
- Governance, risk and compliance experienceGap analysis, risk analysis, policies and procedures.
- Multiple frameworksLaw 25, CyberSecure Canada, CIS Controls, NIST CSF, ISO/IEC 27001.
How it works
Assessment
A free 30-minute session to understand your situation, your challenges and the obligations that apply to your organization.
Proposal
A tailored proposal: gap analysis, full implementation or targeted support, based on your actual needs.
Support
Assessment, action plan, then implementation of the practices, at your pace and according to your priorities.
Pricing and frequently asked questions
How much does the support cost?
The cost depends on the size of your organization, your current level of compliance and the support you want. A first meeting assesses your needs and determines whether a gap analysis, a full implementation or targeted support is the best fit.
What does a mandate include?
The scope is defined with you after the assessment. It can be limited to a gap analysis with an action plan, or cover the full implementation: privacy officer, data inventory, policies, registers, incident management, consent and team awareness.
How long does the support last?
It depends on the chosen scope and on your teams' availability. A gap analysis is quicker than a full implementation. The timeline is specified in the proposal, after the assessment.
Is the support done remotely?
Mostly, yes: video calls, document review and remote workshops. Robin Boucher Consultation is based in the Eastern Townships and Montreal and serves organizations across Quebec. Contact him to confirm the language of service for your mandate.
Consultant or lawyer: what is the difference?
A consultant helps you do the work: assess your practices, set priorities, write and implement policies, registers and procedures, train your teams. A lawyer advises you on the law: interpreting the legislation, an incident with a risk of serious injury, a complaint or a request from the Commission d'accès à l'information. When a question requires formal legal advice, Robin Boucher refers it to his own partner lawyer.
My needs go beyond Law 25. Can he help?
Yes. If your concerns cover information security more broadly, Robin Boucher helps you clarify your actual needs and, if required, refers you to technical cybersecurity services.
Does Law 25 Kit receive a commission?
No. You contact the consultant directly, and the mandate is agreed between him and you. Law 25 Kit receives no commission and is not involved in that agreement.
Book your Law 25 assessment
Ready to talk to an expert
A free 30-minute assessment to understand your needs and determine the next steps.
Book my Law 25 assessmentPrefer a written proposal
Prefer a written proposal? Describe your organization in two minutes (form in French).
Request an estimateOr contact him directly
Other solutions
Prefer to handle compliance yourself, or only your website needs updating?
Law 25 Kit: $150
The 15 bilingual templates for baseline compliance and the free 9-step guide, to do the work in-house.
Web implementation: $495
Cookie banner, published policy and compliant forms, installed by RayV (page in French).
Need legal advice? Talk to our partner lawyer.