{"id":6781,"date":"2025-04-14T16:43:02","date_gmt":"2025-04-14T20:43:02","guid":{"rendered":"https:\/\/thewebix.ca\/?p=6781"},"modified":"2025-04-28T10:48:43","modified_gmt":"2025-04-28T14:48:43","slug":"law-25-understanding-your-obligations-as-a-company","status":"publish","type":"post","link":"https:\/\/thewebix.ca\/en\/law-25-understanding-your-obligations-as-a-company\/","title":{"rendered":"Loi 25: Understand the duty your business has"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"6781\" class=\"elementor elementor-6781\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9b29b2f e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no e-con e-child\" data-id=\"9b29b2f\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-44613d3 elementor-widget elementor-widget-heading\" data-id=\"44613d3\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Bill 25: what exactly are we talking about?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-96a18ac elementor-widget elementor-widget-text-editor\" data-id=\"96a18ac\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">The Quebec government has adopted the <span class=\"s1\">Law 25<\/span>also known as <i>An Act to modernize legislative provisions respecting the protection of personal information<\/i>in 2021. Since then, it has been phased in gradually until its full entry into force in September 2024.<\/p><p class=\"p1\">Consequently, this reform <span class=\"s1\">obliges<\/span> companies and public bodies to review the way they manage personal data. It <span class=\"s1\">strengthens citizens' rights<\/span> and, above all <span class=\"s1\">imposes a clear framework<\/span> organizations, in a digital context where the collection and exploitation of personal information has become commonplace.<\/p><p class=\"p1\">What's more, today, any organization that <span class=\"s1\">collects, stores or uses personal data<\/span> must <span class=\"s1\">prove that its practices comply<\/span> to Bill 25. This applies equally to large companies, SMEs, NPOs, self-employed workers and online stores.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b99f336 elementor-widget elementor-widget-image\" data-id=\"b99f336\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"960\" height=\"960\" src=\"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image.png\" class=\"attachment-large size-large wp-image-6793\" alt=\"infographie-sur-la-loi-25\" srcset=\"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image.png 1024w, https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image-300x300.png 300w, https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image-150x150.png 150w, https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image-768x768.png 768w, https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image-12x12.png 12w\" sizes=\"(max-width: 960px) 100vw, 960px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c320029 e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no e-con e-child\" data-id=\"c320029\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f60892b elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"f60892b\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-940e954 elementor-widget elementor-widget-heading\" data-id=\"940e954\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Appoint a Privacy Officer<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c9c7c9d elementor-widget elementor-widget-text-editor\" data-id=\"c9c7c9d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">Law 25 <span class=\"s1\">obliges you<\/span>as a company, to <span class=\"s1\">designate a person responsible for the protection of personal information<\/span>In other words, whatever the size of your organization, <span class=\"s1\">you must name someone<\/span> to ensure compliance with your privacy practices.<\/p><p class=\"p1\">You can entrust this role to the manager, an employee or an external consultant. Once designated, <span class=\"s1\">you must clearly display his name, title and contact details<\/span> on your website. Ideally, this information should be included in your privacy policy or on your contact page.<\/p><p class=\"p1\">In addition, this manager <span class=\"s1\">answers questions from the audience<\/span>, <span class=\"s1\">supervises data management<\/span> and <span class=\"s1\">makes sure your company complies with Bill 25<\/span> at every stage: collection, use, retention and disclosure of personal information.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-da0e27a elementor-widget elementor-widget-heading\" data-id=\"da0e27a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Declaration, register and mandatory notification <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6f1ae32 elementor-widget elementor-widget-text-editor\" data-id=\"6f1ae32\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">The Privacy Officer <span class=\"s1\">ensures:<\/span><\/p><ul><li><span class=\"s1\">Practical application of the rules<\/span> related to collection<\/li><li>How to use<\/li><li>Conservation<\/li><li>Data communication.<\/li><\/ul><p>\u00a0<\/p><p>Thus, it <span class=\"s1\">ensures that the company complies with its obligations<\/span> at every stage of the processing of personal information.<\/p><p class=\"p1\">In addition, it <span class=\"s1\">also responds to requests from the public. N<\/span>particularly those relating to access, rectification or withdrawal of consent.<\/p><p class=\"p1\">In this sense, if you run a small business, <span class=\"s1\">you can self-train<\/span> to take on this role. The Commission d'acc\u00e8s \u00e0 l'information (CAI) makes available a <a href=\"https:\/\/www.cai.gouv.qc.ca\/documents\/modele-politique-confidentialite.pdf\">policy model<\/a> and many useful resources for <span class=\"s1\">guide you through the compliance process<\/span>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2a1afda e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no e-con e-child\" data-id=\"2a1afda\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9a196a2 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"9a196a2\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0fd1177 elementor-widget elementor-widget-heading\" data-id=\"0fd1177\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Managing confidentiality incidents under Bill 25<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6d37b93 elementor-widget elementor-widget-text-editor\" data-id=\"6d37b93\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">Law 25 <span class=\"s1\">obliges you to take any confidentiality incident seriously<\/span>. As soon as personal information is accessed, used, shared or deleted without authorization <span class=\"s1\">you must act<\/span>. Even if it's a mistake.<\/p><p class=\"p1\">Indeed, a simple mistake, such as sending an e-mail containing sensitive information to the wrong person, is enough. Cyber-attacks, data leaks and unauthorized access to your systems also count as confidentiality incidents.<\/p><p class=\"p1\">Every time, <span class=\"s1\">treat the incident as an alert<\/span>. Analyze the situation, take the necessary measures and document the event. By reacting swiftly, you protect the people involved and the environment. <span class=\"s1\">demonstrate your compliance with Bill 25<\/span>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d963dff elementor-widget elementor-widget-heading\" data-id=\"d963dff\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Declaration, register and mandatory notification <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cbe2d87 elementor-widget elementor-widget-text-editor\" data-id=\"cbe2d87\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">As soon as a confidentiality incident occurs, the company <span class=\"s1\">must react immediately<\/span>. She <span class=\"s1\">record the incident in an internal register<\/span>This is an essential tool for ensuring accountability. In fact, this register <span class=\"s1\">explains what happened<\/span>indicates the date, identifies the personal information affected and describes the corrective measures applied. <span class=\"s1\">Where applicable<\/span>The company must submit this register to the Commission d'acc\u00e8s \u00e0 l'information du Qu\u00e9bec (CAI) during an investigation.<\/p><p class=\"p1\"><span class=\"s1\">In addition<\/span>If the incident presents a serious risk of harm - such as identity theft, damage to reputation or financial loss - the company will <span class=\"s1\">must immediately notify<\/span> CAI and the people affected. This approach enables affected individuals to quickly take the necessary steps to protect themselves.<\/p><p class=\"p1\">To assess the level of risk and know how to react appropriately, CAI provides a <a href=\"https:\/\/www.cai.gouv.qc.ca\/documents\/Guide_incidents_confidentialite.pdf\">practical guide to confidentiality incidents<\/a>. This document is particularly useful for SMEs that do not have an in-house legal department.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bd8789b e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no e-con e-child\" data-id=\"bd8789b\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bddc005 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"bddc005\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d34027a elementor-widget elementor-widget-heading\" data-id=\"d34027a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Implement a compliant privacy policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae9dacd elementor-widget elementor-widget-text-editor\" data-id=\"ae9dacd\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>L<span class=\"s1\">a Law 25 <\/span>obliges you to publish a clear, up-to-date and easy-to-read privacy policy<span class=\"s1\">especially on your website.<\/span><\/p><p class=\"p3\">In this policy, <span class=\"s2\">explain clearly<\/span> :<\/p><p class=\"p4\">\u00a0<\/p><ul><li><p class=\"p1\">What personal information you collect;<\/p><\/li><li><p class=\"p1\">Why you collect them;<\/p><\/li><li><p class=\"p1\">How you store and protect them;<\/p><\/li><li><p class=\"p1\">How long you keep them;<\/p><\/li><li><p class=\"p1\">And how each person can exercise their rights (access, rectification, withdrawal of consent).<\/p><\/li><\/ul><p>\u00a0<\/p><p class=\"p3\">Don't just copy a generic model. <span class=\"s2\">Adapt your policy to your actual practices<\/span>. If you use tools like Google Analytics, a CRM or online forms, mention them. Your visitors need to know where they stand.<\/p><p class=\"p3\">Learn how to write a compliant policy, <span class=\"s2\">visit <a href=\"https:\/\/thewebix.ca\/en\/privacy-policy-law-25\/\">this complete article on Bill 25<\/a><\/span>. It guides you step by step and helps you to include all the essential elements.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2ca64b9 e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no e-con e-child\" data-id=\"2ca64b9\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-eeb4744 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"eeb4744\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6ff26f6 elementor-widget elementor-widget-heading\" data-id=\"6ff26f6\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The right to data portability<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae522cb elementor-widget elementor-widget-text-editor\" data-id=\"ae522cb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">Bill 25 introduces the <span class=\"s1\">right to portability. This right <\/span>allows each individual to <span class=\"s1\">request a copy of your personal information<\/span> in a structured, readable and commonly used format.<\/p><p class=\"p1\">Your company must therefore <span class=\"s1\">be able to extract these data <\/span>and <span class=\"s1\">transmit them in a standard format<\/span> such that <span class=\"s1\">CSV, JSON or XML<\/span>. This information includes name, purchases, preferences or any other relevant information.<\/p><p class=\"p1\">What's more, technology permitting, the user can also <span class=\"s1\">ask you to transfer its data directly to another company<\/span>. In other words, this right makes it easier to change suppliers and gives users <span class=\"s1\">real control over their personal data<\/span>.<\/p><p class=\"p1\">However, this right <span class=\"s1\">applies only to information collected directly from the data subject<\/span>. In other words, you are not obliged to transfer data deduced or generated by your own internal systems. Behavioral analyses and risk scores are part of the information you are required to provide. <span class=\"s1\">are not required to disclose<\/span>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c7fc53b e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no e-con e-child\" data-id=\"c7fc53b\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a4ed09a elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"a4ed09a\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-61f58d0 elementor-widget elementor-widget-heading\" data-id=\"61f58d0\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Make your employees aware of Bill 25<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5285020 elementor-widget elementor-widget-text-editor\" data-id=\"5285020\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">Compliance isn't just about your tools or your privacy policy. <span class=\"s1\">It's also about people<\/span>. Your employees are often the first to handle personal data: receiving e-mail, managing a CRM, collecting customer information...<\/p><p class=\"p1\">That's why it's essential to <span class=\"s1\">train your team<\/span>. Make sure everyone understands what personal information is, what they can and can't do with it, and how to react in the event of an incident. Even a small human error can result in non-compliance with Bill 25.<\/p><p class=\"p1\">What's more, you can integrate reminders into your internal processes, as a simple procedure to follow in case of doubt. By creating a culture of confidentiality, you strengthen your compliance and reduce the risk of errors.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ac2d03d e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no e-con e-child\" data-id=\"ac2d03d\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5cac477 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"5cac477\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3dce077 elementor-widget elementor-widget-heading\" data-id=\"3dce077\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The importance of a compliance audit<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3be378f elementor-widget elementor-widget-text-editor\" data-id=\"3be378f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">To be compliant, you need to know <span class=\"s1\">where you are<\/span>. That's where the audit comes in. A compliance audit gives you a clear picture of your current personal data practices.<\/p><p class=\"p1\">This is a diagnostic that reviews your website, forms, software, contracts and internal processes. Thanks to this assessment, you can <span class=\"s1\">identify discrepancies<\/span>This is an excellent way of demonstrating your good faith in the event of an audit.<\/p><p class=\"p1\">What's more, this audit can be carried out in-house if you have the resources, or entrusted to an external expert for greater objectivity. Either way, it's a valuable tool for moving from theory to action.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ab92692 e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no e-con e-child\" data-id=\"ab92692\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-578ce9f elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"578ce9f\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b6a19a3 elementor-widget elementor-widget-heading\" data-id=\"b6a19a3\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What are the penalties for non-compliance with Bill 25?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d804971 elementor-widget elementor-widget-text-editor\" data-id=\"d804971\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">Law 25 provides for severe penalties for companies that fail to meet their obligations. Unlike previous legislation, where consequences were limited, Bill 25 marks a real change. It gives the Commission d'acc\u00e8s \u00e0 l'information (CAI) greater powers to impose administrative and penal sanctions.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7838241 elementor-widget elementor-widget-heading\" data-id=\"7838241\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Financial fines and legal risks<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69f16a1 elementor-widget elementor-widget-text-editor\" data-id=\"69f16a1\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">If you do not comply with Law 25, <span class=\"s1\">you expose yourself to significant penalties<\/span>. The CAI can impose fines of up to <span class=\"s1\">10 million dollars or 2 % of your worldwide sales<\/span>for the highest amount. These sanctions are aimed at administrative infractions, such as lack of transparency or absence of valid consent.<\/p><p class=\"p3\"><span class=\"s2\">If you <\/span>refuse to cooperate with CAI<span class=\"s2\"> or that you <\/span>careless handling of personal data<span class=\"s2\">the consequences are even more severe. In these more serious cases, the penalty can be as high as <\/span>25 million dollars or 4 % of annual worldwide sales<span class=\"s2\">.<\/span><\/p><p class=\"p1\">These amounts are comparable to those of <span class=\"s1\">RGPD in Europe<\/span>which shows the extent to which the Quebec government <span class=\"s1\">takes privacy seriously<\/span>. Law 25 makes no distinction between large companies and SMEs: everyone is affected, and rigor is now the norm.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fa2c240 elementor-widget elementor-widget-heading\" data-id=\"fa2c240\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">SMEs are also concerned<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fa76610 elementor-widget elementor-widget-text-editor\" data-id=\"fa76610\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">Don't think that Bill 25 is only aimed at large companies. <span class=\"s1\">In reality<\/span>CAI regularly reminds us that SMEs, self-employed workers and community organizations must also comply. <span class=\"s1\">In other words<\/span>Regardless of the size of your company, you must apply the same principles of transparency, security and responsibility when managing personal information.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0f33825 elementor-widget elementor-widget-heading\" data-id=\"0f33825\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The impact on reputation<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9a5ee55 elementor-widget elementor-widget-text-editor\" data-id=\"9a5ee55\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">Beyond the fines, poor confidentiality management can have serious consequences. <span class=\"s1\">disastrous effects on reputation<\/span> of a company. A data leak, especially if undeclared or poorly managed, can lead to :<\/p><ul><li><p class=\"p1\">A loss of customer confidence;<\/p><\/li><li><p class=\"p1\">Negative media coverage;<\/p><\/li><li><p class=\"p1\">Lower sales;<\/p><\/li><li><p class=\"p1\">And potential disputes.<\/p><\/li><\/ul><p class=\"p1\">In short, prevention is better than cure. A proactive company, with clear compliance mechanisms in place, inspires confidence - and avoids having to react in a hurry.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0898c1c e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no e-con e-child\" data-id=\"0898c1c\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8ce8fce elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"8ce8fce\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8ca237a elementor-widget elementor-widget-heading\" data-id=\"8ca237a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How can you ensure your company's compliance with Bill 25?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8b3e277 elementor-widget elementor-widget-text-editor\" data-id=\"8b3e277\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">The best way to protect yourself is to act now. Here are the recommended first steps:<\/p><ul><li><p class=\"p1\">Take stock of the personal data you collect<\/p><\/li><li><p class=\"p1\">Designate your personal information protection officer (PIPO)<\/p><\/li><li><p class=\"p1\">Update or write your privacy policy<\/p><\/li><li><p class=\"p1\">Implement a confidentiality incident log<\/p><\/li><li><p class=\"p1\">Evaluate your digital tools and collection practices<\/p><\/li><li><p class=\"p1\">Finally, make sure that your Web forms, newsletters and CRM systems comply with Bill 25.<\/p><\/li><\/ul><p class=\"p1\">You can consult the <a href=\"https:\/\/www.cai.gouv.qc.ca\/documents\/Guide_Loi25_entreprises.pdf\">official compliance guide for companies<\/a> published by CAI, which provides a clear roadmap.<\/p><p class=\"p1\">Alternatively, if you lack the time or expertise, you can call on the services of a specialist agency or consultant in cybersecurity and digital compliance.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-251ca33 e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no e-con e-child\" data-id=\"251ca33\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-cd11ade elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"cd11ade\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6d288f7 elementor-widget elementor-widget-heading\" data-id=\"6d288f7\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Conclusion: better safe than sorry<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b9295e4 elementor-widget elementor-widget-text-editor\" data-id=\"b9295e4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\"><span class=\"s1\">In conclusion, Bill 25 <\/span>is profoundly transforming the way Quebec companies manage personal data<span class=\"s1\">. You can no longer simply update your privacy policy. You need to <\/span>adopt a comprehensive culture of responsible personal information management<span class=\"s1\">.<\/span><\/p><p class=\"p3\">By complying with Law 25, <span class=\"s2\">you comply with the law, protect your customers, strengthen their trust and avoid avoidable costs<\/span>. It's not just an administrative obligation. It is a <span class=\"s2\">strategic investment<\/span> in your company's credibility and sustainability.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Bill 25: what exactly are we talking about? The Quebec government adopted Bill 25, also known as An Act to modernize legislative provisions respecting the protection of personal information, in 2021. Since then, it has put in place a progressive application until its full entry into force in September 2024. As a result, this reform is forcing companies and public bodies to review the way they manage personal data. It strengthens citizens' rights and, above all, imposes a clear framework on organizations, in a digital context where the collection and exploitation of personal information has become commonplace. What's more, today, any organization that collects, stores or uses personal data must prove that its practices comply with Bill 25. This applies equally to large corporations, SMEs, NPOs, self-employed workers and online stores. Appoint a person responsible for the protection of personal information Bill 25 requires you, as a company, to appoint a person responsible for the protection of personal information. In other words, regardless of the size of your organization, you must appoint someone to ensure compliance of your privacy practices. You can assign this role to a manager, an employee or an external consultant. Once appointed, you need to clearly display their name, title and contact details on your website. Ideally, this information will be included in your privacy policy or on your contact page. In addition, this person answers questions from the public, oversees data management and ensures that your company complies with Law 25 at every stage: collection, use, retention and disclosure of personal information. Declaration, register and mandatory notification The Privacy Officer is responsible for..: The concrete application of rules relating to the collection Use Retention Communication of data.   In this way, he or she ensures that the company complies with its obligations at every stage of personal information processing. He also responds to requests from the public. In particular, he or she is responsible for requests for access, rectification or withdrawal of consent. In this sense, if you run a small business, you can train yourself to take on this role. The Commission d'acc\u00e8s \u00e0 l'information (CAI) provides a model policy and several useful resources to guide you through compliance. Managing privacy incidents under Bill 25 Bill 25 requires you to take privacy incidents seriously. As soon as personal information is accessed, used, shared or deleted without authorization, you must act. Even if it's a mistake. A simple mistake, such as sending an e-mail containing sensitive information to the wrong person, is enough. What's more, a cyber-attack, a data leak or unauthorized access to your systems also count as confidentiality incidents. Each time, treat the incident as an alert. Analyze the situation, take the necessary action and document the event. By reacting quickly, you protect the people involved and demonstrate your compliance with Bill 25. Declaration, register and mandatory notification As soon as a confidentiality incident occurs, the company must react immediately. It records the incident in an internal register, an essential tool for ensuring accountability. In fact, this log specifies what happened, the date, identifies the personal information affected and describes the corrective measures applied. Where applicable, the company must submit this log to the Commission d'acc\u00e8s \u00e0 l'information du Qu\u00e9bec (CAI) during an investigation. Furthermore, if the incident presents a serious risk of harm - such as identity theft, damage to reputation or financial loss - the company must notify the CAI and the individuals concerned without delay. This enables affected individuals to quickly take the necessary steps to protect themselves. To assess the level of risk and know how to react appropriately, CAI provides a practical guide to confidentiality incidents. This document is particularly useful for SMEs that do not have an in-house legal department. Set up a compliant privacy policy Law 25 requires you to publish a clear, up-to-date and easy-to-read privacy policy, particularly on your website. In this policy, clearly explain: What personal information you collect; Why you collect it; How you store and protect it; How long you keep it; And how each individual can exercise his or her rights (access, rectification, withdrawal of consent).   Don't just copy a generic model. Adapt your policy to your actual practices. If you use tools such as Google Analytics, a CRM or online forms, mention them. Your visitors need to know where they stand. To learn how to write a compliant policy, check out this comprehensive article on Law 25. It guides you step by step and helps you include all the essential elements. The right to data portability Law 25 introduces the right to data portability. This right enables every individual to request a copy of their personal information in a structured, readable and commonly used format. Your company must therefore be able to extract this data and transmit it in a standard format such as CSV, JSON or XML. This information includes name, purchases, preferences or any other relevant information. What's more, if technology permits, users can also ask you to transfer their data directly to another company. In other words, this right facilitates the change of supplier and gives users real control over their personal data. However, this right only applies to information collected directly from the data subject. In other words, you are not obliged to transfer data deduced or generated by your own internal systems. Behavioral analysis and risk scores are examples of information you are not required to disclose. Make your employees aware of Bill 25 The<\/p>","protected":false},"author":1,"featured_media":6836,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[61],"tags":[],"class_list":["post-6781","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-marketing-web"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Loi 25 : Comprendre vos obligations en tant qu&#039;entreprise<\/title>\n<meta name=\"description\" content=\"Tout savoir sur la loi 25 : d\u00e9couvrez les obligations cl\u00e9s pour rester conforme et prot\u00e9ger les donn\u00e9es personnelles au Qu\u00e9bec.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thewebix.ca\/en\/law-25-understanding-your-obligations-as-a-company\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Loi 25 : Comprendre vos obligations en tant qu&#039;entreprise\" \/>\n<meta property=\"og:description\" content=\"Tout savoir sur la loi 25 : d\u00e9couvrez les obligations cl\u00e9s pour rester conforme et prot\u00e9ger les donn\u00e9es personnelles au Qu\u00e9bec.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thewebix.ca\/en\/law-25-understanding-your-obligations-as-a-company\/\" \/>\n<meta property=\"og:site_name\" content=\"Thewebix | Conception web | SEO | Marketing | Rive sud de Montr\u00e9al\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/p\/TheWebix-61556770168216\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-14T20:43:02+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-28T14:48:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image_2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1536\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"guillaume1833953\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"guillaume1833953\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/\"},\"author\":{\"name\":\"guillaume1833953\",\"@id\":\"https:\/\/thewebix.ca\/#\/schema\/person\/34c62302413181516ec97cfc8c3c339f\"},\"headline\":\"Loi 25 : Comprendre vos obligations en tant qu&rsquo;entreprise\",\"datePublished\":\"2025-04-14T20:43:02+00:00\",\"dateModified\":\"2025-04-28T14:48:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/\"},\"wordCount\":2038,\"publisher\":{\"@id\":\"https:\/\/thewebix.ca\/#organization\"},\"image\":{\"@id\":\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image_2.png\",\"articleSection\":[\"Marketing web\"],\"inLanguage\":\"en-CA\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/\",\"url\":\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/\",\"name\":\"Loi 25 : Comprendre vos obligations en tant qu'entreprise\",\"isPartOf\":{\"@id\":\"https:\/\/thewebix.ca\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image_2.png\",\"datePublished\":\"2025-04-14T20:43:02+00:00\",\"dateModified\":\"2025-04-28T14:48:43+00:00\",\"description\":\"Tout savoir sur la loi 25 : d\u00e9couvrez les obligations cl\u00e9s pour rester conforme et prot\u00e9ger les donn\u00e9es personnelles au Qu\u00e9bec.\",\"breadcrumb\":{\"@id\":\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#breadcrumb\"},\"inLanguage\":\"en-CA\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-CA\",\"@id\":\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#primaryimage\",\"url\":\"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image_2.png\",\"contentUrl\":\"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image_2.png\",\"width\":1536,\"height\":1024,\"caption\":\"infographie-loi-25\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/thewebix.ca\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Loi 25 : Comprendre vos obligations en tant qu&rsquo;entreprise\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/thewebix.ca\/#website\",\"url\":\"https:\/\/thewebix.ca\/\",\"name\":\"Thewebix | Conception web | SEO | Marketing | Rive sud de Montr\u00e9al\",\"description\":\"Services Web\",\"publisher\":{\"@id\":\"https:\/\/thewebix.ca\/#organization\"},\"alternateName\":\"Services Thewebix inc\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/thewebix.ca\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-CA\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/thewebix.ca\/#organization\",\"name\":\"Thewebix | Conception web | SEO | Marketing | Rive sud de Montr\u00e9al\",\"url\":\"https:\/\/thewebix.ca\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-CA\",\"@id\":\"https:\/\/thewebix.ca\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/02\/Rond-jaune-et-bleu.png\",\"contentUrl\":\"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/02\/Rond-jaune-et-bleu.png\",\"width\":2048,\"height\":2048,\"caption\":\"Thewebix | Conception web | SEO | Marketing | Rive sud de Montr\u00e9al\"},\"image\":{\"@id\":\"https:\/\/thewebix.ca\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/p\/TheWebix-61556770168216\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/thewebix.ca\/#\/schema\/person\/34c62302413181516ec97cfc8c3c339f\",\"name\":\"guillaume1833953\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-CA\",\"@id\":\"https:\/\/thewebix.ca\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/68e2ef8e5f82fd2734b1a6323be4bd2e171a2f2b21cd0147ce1e6305132dca65?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/68e2ef8e5f82fd2734b1a6323be4bd2e171a2f2b21cd0147ce1e6305132dca65?s=96&d=mm&r=g\",\"caption\":\"guillaume1833953\"},\"sameAs\":[\"http:\/\/thewebix.ca\"],\"url\":\"https:\/\/thewebix.ca\/en\/author\/guillaume1833953\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Bill 25: Understanding your obligations as a company","description":"All you need to know about Bill 25: discover the key obligations to remain compliant and protect personal data in Quebec.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/thewebix.ca\/en\/law-25-understanding-your-obligations-as-a-company\/","og_locale":"en_US","og_type":"article","og_title":"Loi 25 : Comprendre vos obligations en tant qu'entreprise","og_description":"Tout savoir sur la loi 25 : d\u00e9couvrez les obligations cl\u00e9s pour rester conforme et prot\u00e9ger les donn\u00e9es personnelles au Qu\u00e9bec.","og_url":"https:\/\/thewebix.ca\/en\/law-25-understanding-your-obligations-as-a-company\/","og_site_name":"Thewebix | Conception web | SEO | Marketing | Rive sud de Montr\u00e9al","article_publisher":"https:\/\/www.facebook.com\/p\/TheWebix-61556770168216\/","article_published_time":"2025-04-14T20:43:02+00:00","article_modified_time":"2025-04-28T14:48:43+00:00","og_image":[{"width":1536,"height":1024,"url":"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image_2.png","type":"image\/png"}],"author":"guillaume1833953","twitter_card":"summary_large_image","twitter_misc":{"Written by":"guillaume1833953","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#article","isPartOf":{"@id":"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/"},"author":{"name":"guillaume1833953","@id":"https:\/\/thewebix.ca\/#\/schema\/person\/34c62302413181516ec97cfc8c3c339f"},"headline":"Loi 25 : Comprendre vos obligations en tant qu&rsquo;entreprise","datePublished":"2025-04-14T20:43:02+00:00","dateModified":"2025-04-28T14:48:43+00:00","mainEntityOfPage":{"@id":"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/"},"wordCount":2038,"publisher":{"@id":"https:\/\/thewebix.ca\/#organization"},"image":{"@id":"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#primaryimage"},"thumbnailUrl":"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image_2.png","articleSection":["Marketing web"],"inLanguage":"en-CA"},{"@type":"WebPage","@id":"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/","url":"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/","name":"Bill 25: Understanding your obligations as a company","isPartOf":{"@id":"https:\/\/thewebix.ca\/#website"},"primaryImageOfPage":{"@id":"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#primaryimage"},"image":{"@id":"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#primaryimage"},"thumbnailUrl":"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image_2.png","datePublished":"2025-04-14T20:43:02+00:00","dateModified":"2025-04-28T14:48:43+00:00","description":"All you need to know about Bill 25: discover the key obligations to remain compliant and protect personal data in Quebec.","breadcrumb":{"@id":"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#breadcrumb"},"inLanguage":"en-CA","potentialAction":[{"@type":"ReadAction","target":["https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/"]}]},{"@type":"ImageObject","inLanguage":"en-CA","@id":"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#primaryimage","url":"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image_2.png","contentUrl":"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/04\/image_2.png","width":1536,"height":1024,"caption":"infographie-loi-25"},{"@type":"BreadcrumbList","@id":"https:\/\/thewebix.ca\/loi-25-comprendre-vos-obligations-en-tant-quentreprise\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/thewebix.ca\/"},{"@type":"ListItem","position":2,"name":"Loi 25 : Comprendre vos obligations en tant qu&rsquo;entreprise"}]},{"@type":"WebSite","@id":"https:\/\/thewebix.ca\/#website","url":"https:\/\/thewebix.ca\/","name":"Thewebix | Web Design | SEO | Marketing | Montreal South Shore","description":"Web Services","publisher":{"@id":"https:\/\/thewebix.ca\/#organization"},"alternateName":"Services Thewebix inc","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/thewebix.ca\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-CA"},{"@type":"Organization","@id":"https:\/\/thewebix.ca\/#organization","name":"Thewebix | Web Design | SEO | Marketing | Montreal South Shore","url":"https:\/\/thewebix.ca\/","logo":{"@type":"ImageObject","inLanguage":"en-CA","@id":"https:\/\/thewebix.ca\/#\/schema\/logo\/image\/","url":"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/02\/Rond-jaune-et-bleu.png","contentUrl":"https:\/\/thewebix.ca\/wp-content\/uploads\/2025\/02\/Rond-jaune-et-bleu.png","width":2048,"height":2048,"caption":"Thewebix | Conception web | SEO | Marketing | Rive sud de Montr\u00e9al"},"image":{"@id":"https:\/\/thewebix.ca\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/p\/TheWebix-61556770168216\/"]},{"@type":"Person","@id":"https:\/\/thewebix.ca\/#\/schema\/person\/34c62302413181516ec97cfc8c3c339f","name":"guillaume1833953","image":{"@type":"ImageObject","inLanguage":"en-CA","@id":"https:\/\/thewebix.ca\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/68e2ef8e5f82fd2734b1a6323be4bd2e171a2f2b21cd0147ce1e6305132dca65?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/68e2ef8e5f82fd2734b1a6323be4bd2e171a2f2b21cd0147ce1e6305132dca65?s=96&d=mm&r=g","caption":"guillaume1833953"},"sameAs":["http:\/\/thewebix.ca"],"url":"https:\/\/thewebix.ca\/en\/author\/guillaume1833953\/"}]}},"acf":[],"_links":{"self":[{"href":"https:\/\/thewebix.ca\/en\/wp-json\/wp\/v2\/posts\/6781","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thewebix.ca\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thewebix.ca\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thewebix.ca\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thewebix.ca\/en\/wp-json\/wp\/v2\/comments?post=6781"}],"version-history":[{"count":0,"href":"https:\/\/thewebix.ca\/en\/wp-json\/wp\/v2\/posts\/6781\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thewebix.ca\/en\/wp-json\/wp\/v2\/media\/6836"}],"wp:attachment":[{"href":"https:\/\/thewebix.ca\/en\/wp-json\/wp\/v2\/media?parent=6781"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thewebix.ca\/en\/wp-json\/wp\/v2\/categories?post=6781"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thewebix.ca\/en\/wp-json\/wp\/v2\/tags?post=6781"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}