Free tool
Law 25: privacy basics
Quebec's Law 25 asks every organization to publish a clear privacy policy and name the person responsible for personal information. We find your policy from the home page and check the essentials.
The essentials of Law 25
01
A person in charge
By default, the organization's highest-ranking person. Their title and contact details go on the website.
02
A clear policy
What you collect, why, how long you keep it, who you share it with, and how people can exercise their rights.
03
Consent
Tracking tools are off by default. Declining is as easy as accepting.
Also required, but not visible from the outside
A register of confidentiality incidents, internal governance rules, and a privacy impact assessment before sending information outside Quebec. We can't check those from your website, but they are part of the law.
Frequently asked questions
Does my website comply with Quebec's Law 25?
Enter your site address: the tool finds your privacy policy from the home page, reads it and checks the essentials, such as the person in charge, retention and rights. It is not legal advice.
What must my privacy policy contain?
What you collect, why, how long you keep it, who you share it with and how people can exercise their rights. The title and contact details of the person in charge must also appear on the website.
What does “unclear” mean in the report?
Each point is spotted by keywords in the policy text. An unclear point means the tool could not decide, not necessarily that there is a problem.
What can the tool not check?
The register of confidentiality incidents, internal governance rules and the privacy impact assessment before sending information outside Quebec. They are part of the law but cannot be seen from your website.
