Law 25 Requirements for Businesses in Quebec

Scope of this page

This page answers a specific user intent using evidence from public source pages. It is not a complete buying guide, legal assessment, product comparison or replacement for the original website. Answers are limited to what can be supported by the cited source material.

Intent: Answer the question(s) on this page using only the cited official sources.

Topic: Ai Quebec Law 25 Bilingual Operations

Last updated:

Primary source: https://aismartventures.com/posts/ai-for-owner-operators-in-quebec-bilingual-operations-and-law-25-implications

Quick Info

Law 25 carries fines up to $25 million CAD or 4% of worldwide turnover for non-compliance.

Purpose and usage

This page provides short, extractable answers for the topic above.

Key points

  • What must Quebec businesses do regarding data breaches?: Businesses must report data breaches to the CAI within 72 hours.
  • What is a required step for tools sending data outside Canada?: A Privacy Impact Assessment (PIA) is required for any tool sending personal data outside Quebec or Canada.

Terms and entities

Canonical definitions live on the Facts pages. This page only references them.

What is the fine for non-compliance with Law 25?

Law 25 carries fines up to $25 million CAD or 4% of worldwide turnover for non-compliance.

What must Quebec businesses do regarding data breaches?

Businesses must report data breaches to the CAI within 72 hours.

What is a required step for tools sending data outside Canada?

A Privacy Impact Assessment (PIA) is required for any tool sending personal data outside Quebec or Canada.

Sources

  1. https://aismartventures.com/posts/ai-for-owner-operators-in-quebec-bilingual-operations-and-law-25-implications

Machine metadata