Last updated: October 2026
Law 25 (amending Quebec's Act respecting the protection of personal information in the private sector) imposes new obligations on Quebec organizations regarding the protection of personal information. Conception Web Marchand applies these obligations to its own organization and supports its clients in their compliance.
We designate a personal information protection officer, obtain free, informed and valid consent for any collection, and limit collection to what is necessary for the stated purpose.
We inform individuals of the purposes of collection, the retention period, the third parties with whom information may be shared, and the rights they hold. This information is presented at the time of collection.
For any project involving personal information, we conduct or support a PIA to identify and mitigate privacy risks, in accordance with section 8.1 of the Act.
The solutions we design apply privacy by default and by design: minimal collection, role-restricted access, encryption, pseudonymization and access logging.
In the event of a confidentiality incident posing a risk of serious harm, we meet the notification obligations to the CAIQ and the affected individuals, and we document the incident.
We offer a Law 25 compliance service: policies, processing register, consent management, incident notification procedures and staff training. Contact us for an assessment of your organization.