Quebec Law 25
Statute
Canada (Quebec)
· 2021
Quebec's Law 25 is the province's modernization of personal-information protection, introducing consent requirements, breach notification, privacy-by-default, automated-decision transparency and a right to data portability. It is widely regarded as the strictest privacy regime in North America and applies to insurers operating in Quebec alongside federal PIPEDA.
Horizontal regime. It binds companies by what they do with data, software or
customers, not by the sector they sit in. The industries below are where it creates
specific, additional duties — not the limit of who has to comply.
Regions
Industries
Each links to that industry as a scored cohort — so the question "how ready is this sector for the regime that governs it?" becomes one you can actually look at.