What to expect?
September 2023: second round of Law 25 obligations come into effect.
It must also provide the names of the third parties for whom the information is collected, as well as the names of the third parties/categories to whom the information must be communicated.
Finally, it must inform the individual of the possibility of transfer of personal information outside of Quebec.
Individuals must consent
- to the use of their personal information for the purposes identified by the Data Protection Officer.
- to the disclosure of their personal information to a third party for the purposes previously identified.
- Private-sector companies face potential fines of 10,000,000 Canadian dollars or 2% of global turnover from previous fiscal year.
- Higher penalties are provided for the most serious offences.
Yes, there are exceptions to the consent requirement if the use of the data is necessary for providing or delivering a product, or providing a service requested by the data subject.
This includes so-called "essential" cookies and trackers.
They trust us

Didomi in Montréal: Turning the challenges of Law 25 into opportunities
Didomi partnered with Adviso and the National Bank of Canada for a conference in Montreal, addressing data protection issues in Québec and around the world, and how companies can turn them into opportunities. Addressing the topic of Law 25, trust, consent management, and digital performance measurement, the panel was composed of Axel Queffeulou, Senior Data Solutions Architect at Adviso, Philippe Rincon, Vice President of Digital at the National Bank of Canada, and Raphaël Boukris, Co-Founder and CRO at Didomi.
Want to learn more about Law 25?
Consent is mandatory for all triggering of trackers
Impact on Analytics
Without consent, you cannot measure analytics performance (sessions / sales)
You cannot share data with your MarTech ecosystem
Important: server-side tracking is not exempt from consent collection.
.png?width=1176&height=776&name=Add%20a%20little%20bit%20of%20body%20text%20(2).png)
Impact on your media performance
Without consent, you cannot run remarketing audiences.
You cannot track conversions (lower in-platform performance, lower data points for AI optimization).
If you are a site publisher, you won't be able to maximize your advertising revenue.
Impact on user experience
Failure to respect user choice or complicated access to user data can lead to loss of trust (e.g., user refuses tracking but gets re-targeted anyway).
A poor consent management system can also cause users to leave a website, thinking they've landed on the wrong site.
Didomi helps you to overcome the challenges of Law 25.svg)
Any device, any environment
Consent Management
Collect user consent in all countries and on all devices.
Create banners that reflect your brand while managing data providers and purposes.
Generate proof of consent in case of audit or complaint.
Measure and optimize your consent rate with advanced Analytics.


No compliance risk
Advanced Compliance Monitoring Module
Detect privacy breaches and implement remediation.
Reduce time and optimize investment in compliance.
Ensure high performance with automated maintenance.