Request a demo
Test your compliance
Login to console

Law 25

Get ready for Law 25 

Learn more about the main impact of the law on your business and digital activities, and how Didomi's consent management platform can help ensure compliance.

Request a demo
41 (59)

What to expect?

September 2023: second round of Law 25 obligations come into effect.

Property 1=Trust Transparency obligation
The company collecting personal data must inform the data subject of the purposes, means of collection and rights of access/rectification provided by law.

It must also provide the names of the third parties for whom the information is collected, as well as the names of the third parties/categories to whom the information must be communicated.

Finally, it must inform the individual of the possibility of transfer of personal information outside of Quebec.
Property 1=Compliant Obligation for consent

Individuals must consent


  • to the use of their personal information for the purposes identified by the Data Protection Officer.

  • to the disclosure of their personal information to a third party for the purposes previously identified.
legal Financial penalties
  • Private-sector companies face potential fines of 10,000,000 Canadian dollars or 2% of global turnover from previous fiscal year.

  • Higher penalties are provided for the most serious offences.
Property 1=Path Any exceptions?

Yes, there are exceptions to the consent requirement if the use of the data is necessary for providing or delivering a product, or providing a service requested by the data subject.

This includes so-called "essential" cookies and trackers.

They trust us


La presse grey

Didomi in Montréal: Turning the challenges of Law 25 into opportunities

Didomi partnered with Adviso and the National Bank of Canada for a conference in Montreal, addressing data protection issues in Québec and around the world, and how companies can turn them into opportunities. Addressing the topic of Law 25, trust, consent management, and digital performance measurement, the panel was composed of Axel Queffeulou, Senior Data Solutions Architect at Adviso, Philippe Rincon, Vice President of Digital at the National Bank of Canada, and Raphaël Boukris, Co-Founder and CRO at Didomi.

Read article
What is the Digital impact of Law 25?

Consent is mandatory for all triggering of trackers



Before the collection of consent is required
After the collection of consent is required
Law 25 - Metrics

Impact on Analytics

Without consent, you cannot measure analytics performance (sessions / sales)

You cannot share data with your MarTech ecosystem

Important: server-side tracking is not exempt from consent collection.

Add a little bit of body text (2)
Law 25 - Marketing

Impact on your media performance

Without consent, you cannot run remarketing audiences.

You cannot track conversions
(lower in-platform performance, lower data points for AI optimization).

If you are a site publisher, you won't be able to maximize your advertising revenue.

Post-September 2023 (1)
Law 25 - UX

Impact on user experience

Failure to respect user choice or complicated access to user data can lead to loss of trust (e.g., user refuses tracking but gets re-targeted anyway).

A poor consent management system can also cause users to leave a website, thinking they've landed on the wrong site.

Untitled design

Didomi helps you to overcome the challenges of Law 2541 (62)

Any device, any environment

Consent Management

Collect user consent in all countries and on all devices.

Create banners that reflect your brand while managing data providers and purposes. 

Generate proof of consent in case of audit or complaint.

Measure and optimize your consent rate with advanced Analytics.


No compliance risk

Advanced Compliance Monitoring Module

Detect privacy breaches and implement remediation.

Reduce time and optimize investment in compliance.

Ensure high performance with automated maintenance.

Group 1342