Law 25 compliance
Personal information protection, without the headache.
Law 25 applies to every organization holding personal information in Québec — including yours. We turn legal obligations into concrete actions: who is accountable, what data you hold, how it is protected, and what to do in case of an incident.
What's included
How we work
- 1
Assessment
Gap between your current practices and legal requirements.
- 2
Remediation
Policies, technical controls and training, in priority order.
- 3
Maintenance
Annual review, incident register and ongoing guidance.
Frequently asked questions
Does Law 25 apply to non-profits?
Yes. Any organization — business, non-profit, union — collecting personal information in Québec is subject to the law.
What are the possible penalties?
Administrative fines can reach $10M or 2% of worldwide revenue; penal sanctions go higher. But the real cost is lost trust.
Do you provide legal advice?
No — we deliver the operational and technical groundwork. For legal questions, we collaborate with your legal counsel.
Ready to take control of your IT?
Book a free 30-minute discovery call. No commitment, no jargon.