Quebec Law 25
Quebec's private-sector privacy law, the strictest in Canada, with explicit-consent rules, data portability, and penalties up to CAD $10M or 2% of turnover.
Full definition
Law 25 (formerly Bill 64) is Quebec's modernized private-sector privacy law, rolled out from 2022 through 2024. It is the strictest regime in Canada: it requires explicit consent for secondary uses, mandatory privacy officers, privacy impact assessments, breach reporting, and a data-portability right, and it carries administrative monetary penalties up to CAD $10 million or 2% of worldwide turnover. Because PIPEDA does not apply to intraprovincial activity in provinces with "substantially similar" laws, Quebec residents rely on Law 25 (enforced by the Commission d'accès à l'information) rather than PIPEDA for most local complaints, and it is effectively setting the national bar.
Go deeper
Canada data removal guide →Related terms
Private Right of Action
The legal ability for a private individual (not just a government agency) to sue a business for a privacy violation.
GDPR
General Data Protection Regulation, the European Union's comprehensive data protection law governing personal data of EU/EEA residents.
Data Subject Request (DSR)
A formal request from a consumer to a business to access, correct, delete, or port their personal data.
Exercise your rights across 500+ brokers
OfflistMe drafts CCPA/GDPR-compliant deletion emails you send from your own inbox, one flat fee, no subscription.
Request Removal NowOne-time from $7