Free tool
Law 25: privacy basics
Quebec's Law 25 asks every organization to publish a clear privacy policy and name the person responsible for personal information. We find your policy from the home page and check the essentials.
The essentials of Law 25
01
A person in charge
By default, the organization's highest-ranking person. Their title and contact details go on the website.
02
A clear policy
What you collect, why, how long you keep it, who you share it with, and how people can exercise their rights.
03
Consent
Tracking tools are off by default. Declining is as easy as accepting.
Also required, but not visible from the outside
A register of confidentiality incidents, internal governance rules, and a privacy impact assessment before sending information outside Quebec. We can't check those from your website, but they are part of the law.