September 2023: second round of Law 25 obligations come into effect. What to expect?
It must also provide the names of the third parties for whom the information is collected, as well as the names of the third parties/categories to whom the information must be communicated.
Finally, it must inform the individual of the possibility of transfer of personal information outside of Quebec.
Individuals must consent
- to the use of their personal information for the purposes identified by the Data Protection Officer.
- to the disclosure of their personal information to a third party for the purposes previously identified.
- Private-sector companies face potential fines of 10,000,000 Canadian dollars or
2% of global turnover from previous fiscal year. - Higher penalties are provided for the most serious offences.
Are there any exceptions to the consent requirement?
Yes, if the use of the data is necessary for providing or delivering a product, or providing a service requested by the data subject.
This includes so-called "essential" cookies and trackers.
Want to learn more about Law 25?
Listen to our webinar on the law and its impacts, or visit our blog!
Consent is mandatory for all triggering of trackers
Impact on Analytics
Without consent, you cannot measure analytics performance (sessions / sales)
You cannot share data with your MarTech ecosystem
Important: server-side tracking is not exempt from consent collection.
.png)
Impact on your media performance
Without consent, you cannot run remarketing audiences.
You cannot track conversions (lower in-platform performance, lower data points for AI optimization).
If you are a site publisher, you won't be able to maximize your advertising revenue.
Impact on user experience
Failure to respect user choice or complicated access to user data can lead to loss of trust (e.g., user refuses tracking but gets re-targeted anyway).
A poor consent management system can also cause users to leave a website, thinking they've landed on the wrong site.
Didomi helps you to overcome the challenges of Law 25.svg)
Any device, any environment
Consent Management
Collect user consent in all countries and on all devices.
Create banners that reflect your brand while managing data providers and purposes.
Generate proof of consent in case of audit or complaint.
Measure and optimize your consent rate with advanced Analytics.


No compliance risk
Advanced Compliance Monitoring Module
Detect privacy breaches and implement remediation.
Reduce time and optimize investment in compliance.
Ensure high performance with automated maintenance.
They trust us