Privacy
Quebec Law 25
Quebec's modernised privacy law — stricter than PIPEDA and the rest of Canada. Mandatory privacy officer, granular consent, data portability, and a right to algorithmic transparency.
What it is
An Act to modernize legislative provisions as regards the protection of personal information (formerly Bill 64, now Law 25), enacted 2021 with rolling effective dates through September 2024. Substantially overhauls the Quebec private-sector privacy statute (Act respecting the protection of personal information in the private sector, P-39.1). Adds GDPR-style data subject rights, mandatory privacy officer, privacy impact assessments, and transparency obligations for automated decision-making.
Why it matters
Penalties reach the greater of C$25M or 4% of worldwide turnover — the highest penalty ceiling of any Canadian privacy law and on par with GDPR. Quebec is a substantially-similar jurisdiction that displaces PIPEDA locally; if you serve Quebec residents you can't piggyback on a federal privacy stack alone.
Who it applies to
Quebec residents specifically — Law 25 displaces PIPEDA in Quebec for private-sector commercial activity.
- Jurisdictions: Canada
How WQI scores it
Web Quality Index considers this standard satisfied when all of the 3 supporting factors pass.
| # | Factor | Status |
|---|---|---|
| 46 | Cookie banner presence + CMP detection | planned |
| 47 | Privacy policy page presence | planned |
| 51 | Cookie scan — actual cookies set on first load | planned |
0 of 3 supporting factors are currently collected. Sites where the remaining 3 haven't been measured will show as partial or unknown on this standard until the data lands.
Related standards
Standards that share factors with this one
Auto-computed from overlapping factor tickets in satisfiedBy, excluding standards already listed under "See also" above. Strong overlap suggests these standards rise and fall together when sites are scored.