Law 25

Get ready for Law 25

Learn more about the main impact of the law on your business and digital activities, and how Didomi's consent management platform can help ensure compliance.

What to expect?

September 2023: second round of Law 25 obligations come into effect.

Transparency obligation

The company collecting personal data must inform the data subject of the purposes, means of collection and rights of access/rectification provided by law.

It must also provide the names of the third parties for whom the information is collected, as well as the names of the third parties/categories to whom the information must be communicated.

Finally, it must inform the individual of the possibility of transfer of personal information outside of Quebec.

Obligation for consent

Individuals must consent

to the use of their personal information for the purposes identified by the Data Protection Officer.
to the disclosure of their personal information to a third party for the purposes previously identified.

Financial penalties

Private-sector companies face potential fines of 10,000,000 Canadian dollars or 2% of global turnover from previous fiscal year.
Higher penalties are provided for the most serious offences.

Any exceptions?

Yes, there are exceptions to the consent requirement if the use of the data is necessary for providing or delivering a product, or providing a service requested by the data subject.

This includes so-called "essential" cookies and trackers.

They trust us

Didomi in Montréal: Turning the challenges of Law 25 into opportunities

Didomi partnered with Adviso and the National Bank of Canada for a conference in Montreal, addressing data protection issues in Québec and around the world, and how companies can turn them into opportunities. Addressing the topic of Law 25, trust, consent management, and digital performance measurement, the panel was composed of Axel Queffeulou, Senior Data Solutions Architect at Adviso, Philippe Rincon, Vice President of Digital at the National Bank of Canada, and Raphaël Boukris, Co-Founder and CRO at Didomi.

Any device, any environment

Consent Management

Collect user consent in all countries and on all devices.

Create banners that reflect your brand while managing data providers and purposes.

Generate proof of consent in case of audit or complaint.

Measure and optimize your consent rate with advanced Analytics.