What is Quebec's Law 25?

Law 25 modernised Quebec's private sector privacy rules between 2022 and 2024. It adds strict consent, mandatory breach reporting, privacy by default, and data portability, with penalties up to 25 million Canadian dollars or 4 percent of worldwide turnover.

Which law applies across Canada?

PIPEDA applies federally to private sector organisations, enforced by the Office of the Privacy Commissioner. Quebec, Alberta, and British Columbia have their own substantially similar provincial laws.

Amerika Utara

Persetujuan kuki di Canada

Persetujuan dan undang-undang privasi di Canada

Canada's federal private sector law is PIPEDA, enforced by the Office of the Privacy Commissioner, and based on meaningful consent that can be express or implied depending on sensitivity. Quebec stands apart with Law 25, which significantly modernised provincial privacy rules between 2022 and 2024, adding strict consent, breach reporting, privacy by default, and the right to data portability. Law 25 also carries heavy penalties, up to 25 million Canadian dollars or 4 percent of worldwide turnover. Quebec requires that privacy settings be set to the highest level by default and that consent for cookies and profiling be clear. Alberta and British Columbia have their own substantially similar private sector laws.

Pihak berkuasa

Office of the Privacy Commissioner of Canada (OPC)

Status

PIPEDA federally since 2000, with Quebec's Law 25 phased in from 2022 to 2024

Undang-undang utama

PIPEDA

Bahasa

English, Français

Siapa yang wajib mematuhi

Private-sector organizations that collect, use or disclose personal information in commercial activity in Canada.

Penalti

Quebec Law 25 fines up to 25 million Canadian dollars or 4 percent of worldwide turnover

Kewajipan utama

Obtain meaningful consent
Limit collection to stated purposes
Be transparent about practices
Provide access to personal information
Safeguard the data held

Panduan tempatan

Apply PIPEDA federally and Quebec Law 25 for Quebec residents
Set privacy settings to the highest level by default in Quebec
Provide notices in English and French
Prepare for breach reporting and data portability under Law 25

Bagaimana ConsentX membantu

Meaningful, plain-language consent
Purpose-specific categories
Access-request intake
Evidence trail

Mula secara percuma

yoursite.com

Canada

Kami menghargai privasi anda

Kami meminta persetujuan anda sebelum sebarang kuki bukan penting, mengikut peraturan yang terpakai di wilayah anda.

Benarkan semuaTolak yang bukan pentingUrus keutamaan

Persetujuan direkodkan

sha256 · chain ok

Halaman ini diterjemah secara mesin dan mungkin mengandungi kesilapan. Sila semak butiran undang-undang dengan penasihat guaman tempatan yang berkelayakan sebelum bergantung padanya.

Sediakan Canada dengan ConsentX

Sepanduk mengikut wilayah, sekatan skrip awal, DSAR dan bukti kalis usik.

Mula secara percuma Tempah demo

Cara mematuhi Canada dengan ConsentX

1
Imbas laman web anda
Jalankan imbasan percuma untuk mencari setiap kuki dan penjejak di laman anda, supaya anda tahu dengan tepat apa yang memerlukan persetujuan di bawah Canada.
2
Paparkan sepanduk persetujuan mengikut wilayah
Tambah sepanduk ConsentX. Ia mengesan wilayah setiap pelawat dan memaparkan secara automatik pengalaman persetujuan yang dikehendaki Canada.
3
Sekat penjejak sehingga ada persetujuan
Kekalkan kuki dan penjejak bukan penting dalam keadaan disekat sehingga pelawat bersetuju, supaya tiada apa-apa berjalan sebelum persetujuan.
4
Rekod bukti kalis usik
Setiap pilihan disimpan sebagai resit persetujuan kalis usik yang boleh anda kemukakan dalam audit Canada.
5
Uruskan permintaan data tepat pada masanya
Gunakan aliran kerja DSAR terbina dengan pemasa SLA untuk menjawab permintaan akses, pemadaman dan penarikan diri dalam tempoh yang ditetapkan undang-undang.