{"id":8587,"date":"2023-12-21T10:29:24","date_gmt":"2023-12-21T09:29:24","guid":{"rendered":"https:\/\/www.dot-anonymizer.com\/?page_id=8587"},"modified":"2025-10-16T15:49:29","modified_gmt":"2025-10-16T13:49:29","slug":"law-25-protection-of-personal-information","status":"publish","type":"page","link":"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/","title":{"rendered":"Law 25 – Protection of personal information"},"content":{"rendered":"

Law 25<\/h1><\/div>

Protection of personal information<\/p>\n<\/div>

Quebec’s Law 25, in force since September 2022, strengthens companies’ responsibility to protect personal data.<\/p>\n<\/div><\/div><\/div>

\"Header<\/span><\/div><\/div><\/div><\/div><\/div>
<\/div><\/div>

What is Law 25, and when does it apply?<\/h2><\/div><\/div><\/div>
<\/div><\/div>
\"Picto<\/span><\/div>

Law 25, also known as “An Act to modernize legislative provisions respecting the protection of personal information”, aims to protect the population of Quebec. Its purpose is to make companies holding personal information on Quebec citizens more accountable. <\/p>\n<\/div><\/div><\/div>

\"Picto<\/span><\/div>

Law 25 is being progressively implemented over a three-year period, starting on September 22, 2022. Most of its obligations came into force on September 22, 2023.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

\"Picto<\/span><\/div>

Who is affected by Law 25, and how do the fines work?<\/h2><\/div><\/div><\/div>

Law 25 applies to all private companies and public organizations<\/b> that collect, process or share personal information. From September 22, 2023, this law requires all organizations to obtain explicit consent<\/b> from individuals for the collection, use and disclosure of their personal information.<\/b><\/p>\n

The reform introduces considerable penalties for companies for non-compliance <\/b> with the legislation, similar to what happened with the General Data Protection Regulation (GDPR)<\/a> in Europe. In the event of non-compliance with Law 25, companies risk fines and sanctions. The Commission d’acc\u00e8s \u00e0 l’information (CAI – Commission for access to information) will have the option of imposing administrative monetary penalties of up to $10,000,000 or 2% of worldwide sales<\/b>, as well as criminal penalties of up to $25,000,000 or 4% of worldwide sales.<\/b><\/p>\n<\/div><\/div><\/div><\/div><\/div>

\"Loi<\/span><\/div>

What does a company need to do, and how can it comply?<\/h2><\/div><\/div><\/div>

With the new privacy responsibilities and obligations imposed on businesses, here are five key points to remember to ensure your company is compliant with the law: <\/p>\n<\/div><\/div><\/div>

\"Picto<\/span><\/div><\/div><\/div>

1. Designate a privacy officer<\/b> and make his or her contact details available<\/b> on the company’s website or by other appropriate means.<\/p>\n<\/div><\/div><\/div><\/div>

\"Picto<\/span><\/div><\/div><\/div>

2. Implement measures to prevent or reduce the impact of a privacy incident<\/b> involving personal information, notify the Commission and the individuals concerned<\/b> in the event of serious harm, and keep a register of incidents.<\/b><\/p>\n<\/div><\/div><\/div><\/div>

\"Picto<\/span><\/div><\/div><\/div>

3. Identify the personal data stored<\/b> by your company and evaluate their degree of vulnerability.<\/b><\/p>\n<\/div><\/div><\/div><\/div>

\"Picto<\/span><\/div><\/div><\/div>

4. Inform the Commission in advance<\/b> of any use of biometric techniques (e.g. fingerprint, facial or voice recognition).<\/p>\n<\/div><\/div><\/div><\/div>

\"Picto<\/span><\/div><\/div><\/div>

5. Destroy personal information<\/b> once the purpose of its collection has been fulfilled or anonymize it<\/b> in order to use it for serious and legitimate purposes, subject to the conditions and retention period stipulated by law.<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>

Anonymize your data with DOT Anonymizer <\/span>!<\/h2><\/div><\/div><\/div>
Discover DOT Anonymizer<\/span>Discover DOT Anonymizer<\/span><\/div><\/a><\/div><\/div><\/div><\/div><\/div>
\"Picto<\/span><\/div>

How can I protect citizens’ personal information?<\/h2><\/div><\/div><\/div>

The preparation of a data processing and retention plan is strongly recommended<\/b> under Law 25. This plan sets a date by which the data collected must be destroyed or irreversibly anonymized.<\/p>\n

Anonymization,<\/b> a process that makes personal information irreversibly anonymous for various uses such as support, analysis, testing or outsourcing, is particularly emphasized under this law.<\/p>\n

DOT Anonymizer <\/a>offers an effective solution for complying with Law 25,<\/b> while preserving data exploitability. The solution is compatible with a variety of platforms and databases, meeting the law’s strict criteria.<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":5,"featured_media":8522,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"100-width.php","meta":{"footnotes":""},"class_list":["post-8587","page","type-page","status-publish","has-post-thumbnail","hentry"],"yoast_head":"\nLaw 25 - Protection of personal information<\/title>\n<meta name=\"description\" content=\"Find out how Quebec's Law 25 strengthens companies' responsibility to protect personal data.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Law 25 - Protection of personal information\" \/>\n<meta property=\"og:description\" content=\"Find out how Quebec's Law 25 strengthens companies' responsibility to protect personal data.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/\" \/>\n<meta property=\"og:site_name\" content=\"DOT - Data Oriented Testing\" \/>\n<meta property=\"article:modified_time\" content=\"2025-10-16T13:49:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.arcadsoftware.com\/dot\/wp-content\/uploads\/2023\/12\/loi-25-que-faire-loi.png\" \/>\n\t<meta property=\"og:image:width\" content=\"500\" \/>\n\t<meta property=\"og:image:height\" content=\"251\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/\",\"url\":\"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/\",\"name\":\"Law 25 - Protection of personal information\",\"isPartOf\":{\"@id\":\"https:\/\/www.arcadsoftware.com\/dot\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.arcadsoftware.com\/dot\/wp-content\/uploads\/2023\/12\/loi-25-que-faire-loi.png\",\"datePublished\":\"2023-12-21T09:29:24+00:00\",\"dateModified\":\"2025-10-16T13:49:29+00:00\",\"description\":\"Find out how Quebec's Law 25 strengthens companies' responsibility to protect personal data.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/#primaryimage\",\"url\":\"https:\/\/www.arcadsoftware.com\/dot\/wp-content\/uploads\/2023\/12\/loi-25-que-faire-loi.png\",\"contentUrl\":\"https:\/\/www.arcadsoftware.com\/dot\/wp-content\/uploads\/2023\/12\/loi-25-que-faire-loi.png\",\"width\":500,\"height\":251,\"caption\":\"Loi 25 protection des donn\u00e9es individuelles\"},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.arcadsoftware.com\/dot\/#website\",\"url\":\"https:\/\/www.arcadsoftware.com\/dot\/\",\"name\":\"DOT - Data Oriented Testing\",\"description\":\"Confidential Data Testing Automation\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.arcadsoftware.com\/dot\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Law 25 - Protection of personal information","description":"Find out how Quebec's Law 25 strengthens companies' responsibility to protect personal data.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/","og_locale":"en_US","og_type":"article","og_title":"Law 25 - Protection of personal information","og_description":"Find out how Quebec's Law 25 strengthens companies' responsibility to protect personal data.","og_url":"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/","og_site_name":"DOT - Data Oriented Testing","article_modified_time":"2025-10-16T13:49:29+00:00","og_image":[{"width":500,"height":251,"url":"https:\/\/www.arcadsoftware.com\/dot\/wp-content\/uploads\/2023\/12\/loi-25-que-faire-loi.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/","url":"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/","name":"Law 25 - Protection of personal information","isPartOf":{"@id":"https:\/\/www.arcadsoftware.com\/dot\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/#primaryimage"},"image":{"@id":"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/#primaryimage"},"thumbnailUrl":"https:\/\/www.arcadsoftware.com\/dot\/wp-content\/uploads\/2023\/12\/loi-25-que-faire-loi.png","datePublished":"2023-12-21T09:29:24+00:00","dateModified":"2025-10-16T13:49:29+00:00","description":"Find out how Quebec's Law 25 strengthens companies' responsibility to protect personal data.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.arcadsoftware.com\/dot\/law-25-protection-of-personal-information\/#primaryimage","url":"https:\/\/www.arcadsoftware.com\/dot\/wp-content\/uploads\/2023\/12\/loi-25-que-faire-loi.png","contentUrl":"https:\/\/www.arcadsoftware.com\/dot\/wp-content\/uploads\/2023\/12\/loi-25-que-faire-loi.png","width":500,"height":251,"caption":"Loi 25 protection des donn\u00e9es individuelles"},{"@type":"WebSite","@id":"https:\/\/www.arcadsoftware.com\/dot\/#website","url":"https:\/\/www.arcadsoftware.com\/dot\/","name":"DOT - Data Oriented Testing","description":"Confidential Data Testing Automation","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.arcadsoftware.com\/dot\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.arcadsoftware.com\/dot\/wp-json\/wp\/v2\/pages\/8587","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.arcadsoftware.com\/dot\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.arcadsoftware.com\/dot\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.arcadsoftware.com\/dot\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.arcadsoftware.com\/dot\/wp-json\/wp\/v2\/comments?post=8587"}],"version-history":[{"count":3,"href":"https:\/\/www.arcadsoftware.com\/dot\/wp-json\/wp\/v2\/pages\/8587\/revisions"}],"predecessor-version":[{"id":12675,"href":"https:\/\/www.arcadsoftware.com\/dot\/wp-json\/wp\/v2\/pages\/8587\/revisions\/12675"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.arcadsoftware.com\/dot\/wp-json\/wp\/v2\/media\/8522"}],"wp:attachment":[{"href":"https:\/\/www.arcadsoftware.com\/dot\/wp-json\/wp\/v2\/media?parent=8587"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}