Get ready for Law 25

Learn more about the main impact of the law on your business and digital activities, and how Didomi's consent management platform can help ensure compliance.

September 2023: second round of Law 25 obligations come into effect. What to expect?

Transparency obligation

The company collecting personal data must inform the data subject of the purposes, means of collection and rights of access/rectification provided by law.

It must also provide the names of the third parties for whom the information is collected, as well as the names of the third parties/categories to whom the information must be communicated.

Finally, it must inform the individual of the possibility of transfer of personal information outside of Quebec.

Obligation for consent

Individuals must consent

to the use of their personal information for the purposes identified by the Data Protection Officer.
to the disclosure of their personal information to a third party for the purposes previously identified.

Financial penalties

Private-sector companies face potential fines of 10,000,000 Canadian dollars or
2% of global turnover from previous fiscal year.
Higher penalties are provided for the most serious offences.

Are there any exceptions to the consent requirement?

Yes, if the use of the data is necessary for providing or delivering a product, or providing a service requested by the data subject.
This includes so-called "essential" cookies and trackers.

Want to learn more about Law 25?

Listen to our webinar on the law and its impacts, or visit our blog!

Any device, any environment

Consent Management

Collect user consent in all countries and on all devices.

Create banners that reflect your brand while managing data providers and purposes.

Generate proof of consent in case of audit or complaint.

Measure and optimize your consent rate with advanced Analytics.