What Law 25 changes for your website
Law 25 modernized the protection of personal information in Quebec, with obligations that came into force in stages between 2022 and 2024. It applies to businesses operating in Quebec, and your website is often the first place where you collect personal information: contact forms, newsletter, orders, cookies.
The penalties are significant (up to $25 million or 4% of worldwide turnover for penal offences), but the first issue is the trust of your customers.
What your website must display
A privacy policy written in clear and simple terms, published on your website, explaining what information you collect, why, who you share it with and how long you keep it.
The title and contact details of your person in charge of the protection of personal information, by default the person with the highest authority in the business.
- A clear, up-to-date privacy policy
- Contact details of the privacy officer
- The purpose stated on every form
- A link to the policy from every page
Cookies, analytics and forms
Technologies that can identify, locate or profile a visitor must be turned off by default. In practice: a consent banner that actually blocks Google Analytics, ad pixels and non-essential cookies until the visitor accepts them.
We also review your forms: only the information you need is requested, the purpose is stated, submissions are encrypted and data does not linger in mailboxes or forgotten plugins.
Security and confidentiality incidents
The law requires reasonable security measures and a register of confidentiality incidents. When there is a risk of serious injury, the Commission d’accès à l’information and the people concerned must be notified.
An up-to-date, monitored and backed-up website greatly reduces that risk. Our maintenance plans and security testing help you demonstrate it.
Compliance pricing
The work depends on the number of forms, the analytics and advertising tools installed and the state of your privacy policy. We price it after a first review.
| Service | Price | Format |
|---|---|---|
| Law 25 website review | On quote | One-time |
| Consent banner and cookie setup | On quote | One-time |
| Included in every new website | Included | From launch |
Every website we build ships with a privacy policy, a consent banner and the privacy officer’s details. We are not lawyers: for legal questions specific to your business, we work alongside your legal advisor.
Our commitments
- Point-by-point review
- Fixes done for you
- Final prices, no GST or QST added
- One dedicated contact
