Law 25, a strict legislation concerning the protection of personal data, even surpasses some of the standards set by the European Union's GDPR.
Since September 22, 2023, fines are to be expected in cases of non-compliance. An organization could face a minimum fine of $15,000, up to 25 million dollars, or 4% of the previous fiscal year's global revenue. Furthermore, new requirements will come into effect on September 22, 2024, so the incentive is significant.
Law 25 affects any company that collects information about Quebec residents, including those based outside the province. For example, if you are an Ontario company with Quebec contacts in your database, the law also applies to you. New requirements will come into effect on September 22, 2024.
Canada is preparing to overhaul its privacy laws with Bill C-27 (currently under parliamentary discussion) - this will have an impact. In parallel, other provinces are considering updates to their privacy laws to offer broader consumer protectionSpeak to a specialist
Aside from the hefty fines, your organization needs to properly execute its compliance process.
While data protection was once considered good practice, Law 25 introduces new obligations that businesses must consider that relate to the protection of personal information of Quebec residents. Here is a summary of the core requirements:
The most notable aspect is the digital piece where doing this internally or only lawyers will not
To navigate this complex legality, we have decided to specialize in supporting our partners to become compliant.
Index offers a tailored solution designed to meet the unique requirements of your organization. Our process includes :
featuring the best tool to efficiently manage cookies (cookie consent)
This covers the main themes such as Data Protection Officer (DPO) appointments, privacy impact assessments (PIAs), Breach Notifications, Subject Rights and Enhanced Consent.
We propose a solution that answers many requirements to help you in the right direction; each of those items are customized to your needs :
We do not aim to provide legal counsel for your organization. We strongly advise consulting with your legal team to delve into the specific details of the Law that pertain to your unique circumstances.
Time is of the essence, and Index recognizes the varying timelines for implementation across organizations. Contact us today to get the process started.Book an appointment