What is Quebec Law 25?
Law 25 is Quebec's personal-information protection law, in force since 2023. It imposes governance, consent, security and breach-reporting obligations on organizations, with fines up to $25M or 4% of worldwide revenue.
Law 25 (formerly Bill 64) modernizes personal-information protection in Quebec. It requires designating a Privacy Officer, keeping a confidentiality-incident register, maintaining clear policies and implementing adequate security measures.
ITGS delivers the technical measures the law requires: encryption, access management, logging, backups and incident detection. For the legal and governance side (policies, Privacy Officer, register, privacy impact assessments), we work with our specialized partner Synéra.
For the legal and governance side of Law 25, ITGS works with its partner Synéra, Law 25 compliance (governance & legal).