What is Quebec's Law 25?

Law 25 modernised Quebec's private sector privacy rules between 2022 and 2024. It adds strict consent, mandatory breach reporting, privacy by default, and data portability, with penalties up to 25 million Canadian dollars or 4 percent of worldwide turnover.

Which law applies across Canada?

PIPEDA applies federally to private sector organisations, enforced by the Office of the Privacy Commissioner. Quebec, Alberta, and British Columbia have their own substantially similar provincial laws.

Nordamerika

Cookiesamtykke i Canada

Samtykke og databeskyttelse i Canada

Canada's federal private sector law is PIPEDA, enforced by the Office of the Privacy Commissioner, and based on meaningful consent that can be express or implied depending on sensitivity. Quebec stands apart with Law 25, which significantly modernised provincial privacy rules between 2022 and 2024, adding strict consent, breach reporting, privacy by default, and the right to data portability. Law 25 also carries heavy penalties, up to 25 million Canadian dollars or 4 percent of worldwide turnover. Quebec requires that privacy settings be set to the highest level by default and that consent for cookies and profiling be clear. Alberta and British Columbia have their own substantially similar private sector laws.

Tilsynsmyndighed

Office of the Privacy Commissioner of Canada (OPC)

Status

PIPEDA federally since 2000, with Quebec's Law 25 phased in from 2022 to 2024

Primær lov

PIPEDA

Sprog

English, Français

Hvem er omfattet

Private-sector organizations that collect, use or disclose personal information in commercial activity in Canada.

Sanktioner

Quebec Law 25 fines up to 25 million Canadian dollars or 4 percent of worldwide turnover

Vigtigste forpligtelser

Obtain meaningful consent
Limit collection to stated purposes
Be transparent about practices
Provide access to personal information
Safeguard the data held

Lokal vejledning

Apply PIPEDA federally and Quebec Law 25 for Quebec residents
Set privacy settings to the highest level by default in Quebec
Provide notices in English and French
Prepare for breach reporting and data portability under Law 25

Sådan hjælper ConsentX

Meaningful, plain-language consent
Purpose-specific categories
Access-request intake
Evidence trail

Kom gratis i gang

yoursite.com

Canada

Vi værner om dit privatliv

Vi beder om dit samtykke før enhver ikke-nødvendig cookie, efter de regler der gælder i din region.

Tillad alleAfvis ikke-nødvendigeAdministrér præferencer

Samtykke registreret

sha256 · chain ok

Denne side er maskinoversat og kan indeholde fejl. Få de juridiske detaljer gennemgået af en kvalificeret lokal juridisk rådgiver, før du forlader dig på den.

Gør Canada klar med ConsentX

Regionsbestemte bannere, forudgående scriptblokering, DSAR og manipulationssikret dokumentation.

Kom gratis i gang Book en demo

Sådan overholder du Canada med ConsentX

1
Scan dit website
Kør en gratis scanning for at finde hver cookie og tracker på dit website, så du ved præcis, hvad der kræver samtykke efter Canada.
2
Vis et regionsbestemt samtykkebanner
Tilføj ConsentX-banneret. Det registrerer hver besøgendes region og viser automatisk den samtykkeoplevelse, som Canada kræver.
3
Blokér trackere indtil samtykke
Hold ikke-nødvendige cookies og trackere blokeret, indtil den besøgende accepterer, så intet udløses før samtykket.
4
Registrér manipulationssikret dokumentation
Hvert valg gemmes som en manipulationssikret samtykkekvittering, som du kan fremlægge ved et Canada-tilsyn.
5
Håndtér anmodninger til tiden
Brug det indbyggede DSAR-workflow med SLA-timere til at besvare anmodninger om indsigt, sletning og fravalg inden for fristen.