{"id":10917,"date":"2023-10-31T14:51:53","date_gmt":"2023-10-31T18:51:53","guid":{"rendered":"https:\/\/engages.ca\/articles\/find-out-almost-everything-about-law-25\/"},"modified":"2026-03-03T11:49:29","modified_gmt":"2026-03-03T15:49:29","slug":"find-out-almost-everything-about-law-25","status":"publish","type":"post","link":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/","title":{"rendered":"Find out (almost!) everything about Law 25"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"10917\" class=\"elementor elementor-10917 elementor-82\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5b81c864 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5b81c864\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-40ec3e90\" data-id=\"40ec3e90\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3d1d669e elementor-widget elementor-widget-text-editor\" data-id=\"3d1d669e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>As an NPO, where do you stand in relation to the <em>Act to modernize legislative provisions as regards the protection of personal information in the private sector<\/em>, also known as <em>Law 25<\/em>?<\/p><ol style=\"list-style-type: lower-alpha;\"><li>It scares me, it seems monstrously big and complicated&#8230;<\/li><li>I think we&#8217;ve taken the necessary steps to comply with it.<\/li><li>Law 25&#8230; what is it?<\/li><\/ol><p><strong><span style=\"color: #000000;\">If you answered a<\/span>,<\/strong><span style=\"color: #000000;\">don&#8217;t worry, your feelings are understandable. It&#8217;s true that <em>Law 25<\/em> is broad in scope, and that its provisions imply more or less significant changes in the way organizations manage personal information.  <\/span><br><span style=\"color: #000000;\"> <\/span><br><span style=\"color: #000000;\"><strong>If you answered b<\/strong>, your confidence is great, but it would be most surprising if you had thought of everything, especially if you haven&#8217;t been able to rely on the services of an expert or lawyer specialized in this field, for example. The implications of Law 25 are more numerous and harder to grasp than you might think!  <\/span><br><span style=\"color: #000000;\"> <\/span><br><span style=\"color: #000000;\"><strong>If you answered <\/strong>c, it&#8217;s time to remedy the situation. You need to get started now, for the sake of your NPO&#8217;s practices. For its long-term survival. <br> <br> <br>As part of our ongoing efforts to help NPOs, Engag\u00e9s spoke to two specialized resources to demystify Law 25 and help you comply without getting in over your head! <br>Definitions <br>Before going into the broad outlines of Law 25, let&#8217;s take a moment to understand some useful definitions.   <\/span><br><span style=\"color: #000000;\"> <\/span><\/p><h2>As part of our ongoing efforts to help NPOs, Engag\u00e9s spoke to two specialized resources to demystify <em>Law 25<\/em> and help you comply without getting in over your head!<\/h2><h3>Definitions<\/h3><p>Before going into the broad outlines of <em>Law 25<\/em>, let&#8217;s take a moment to understand some useful definitions.<\/p><ul><li><span style=\"color: #000000;\"><strong>Personal information<\/strong>: this is any data that enables a natural person to be identified, directly or indirectly. First and last name, facial image, telephone number and sound extract of a person&#8217;s voice are all examples of personal information. <\/span><\/li><li><strong>Sensitive data<\/strong>: the broad category of personal information includes sensitive data. Data is considered sensitive when, \u201cby its nature or the context in which it is used or communicated, [it] gives rise to a high degree of reasonable invasion of privacy*\u201d. Examples include social assistance numbers, biometric data, banking information, medical data and a person&#8217;s orientation (sexual, political, etc.).  <\/li><\/ul><h3><em>Law 25<\/em>: an overview<\/h3><p>In a nutshell, this is a three-phase provincial regulation that sets out some basic obligations for organizations to protect the personal information and sensitive data of all individuals.<\/p><h4><span style=\"color: #8b1d56;\"><strong>Phase 1, effective September 22, 2022<\/strong><\/span><\/h4><p><span style=\"background-color: var( --e-global-color-288e12e ); color: var( --e-global-color-01fc24a ); font-family: var( --e-global-typography-text-font-family ), Sans-serif; font-size: var( --e-global-typography-text-font-size ); font-weight: var( --e-global-typography-text-font-weight );\">All organizations must:<\/span><\/p><ul><li><span style=\"background-color: var( --e-global-color-288e12e ); color: var( --e-global-color-01fc24a ); font-family: var( --e-global-typography-text-font-family ), Sans-serif; font-size: var( --e-global-typography-text-font-size ); font-weight: var( --e-global-typography-text-font-weight );\">appoint a Privacy Officer<\/span><strong style=\"background-color: var( --e-global-color-288e12e ); color: var( --e-global-color-01fc24a ); font-family: var( --e-global-typography-text-font-family ), Sans-serif; font-size: var( --e-global-typography-text-font-size );\">*;<\/strong><\/li><li><span style=\"background-color: var( --e-global-color-288e12e ); color: var( --e-global-color-01fc24a ); font-family: var( --e-global-typography-text-font-family ), Sans-serif; font-size: var( --e-global-typography-text-font-size ); font-weight: var( --e-global-typography-text-font-weight );\">initiate a privacy impact assessment (under certain conditions); <br>&#8211; set up a register of incidents relating to the confidentiality of personal data; <br>&#8211; report to the Commission d&#8217;acc\u00e8s \u00e0 l&#8217;information (CAI) du Qu\u00e9bec any incident that could cause substantial harm to the individuals concerned. <br>* Unless otherwise designated, this will be the person with the highest authority within the organization. <br> <br>Phase 2, effective September 22, 2023 <br>Every organization must ensure that it obtains the consent of each individual whose personal information it wishes to hold and use.<\/span><\/li><li><span style=\"background-color: var( --e-global-color-288e12e ); color: var( --e-global-color-01fc24a ); font-family: var( --e-global-typography-text-font-family ), Sans-serif; font-size: var( --e-global-typography-text-font-size ); font-weight: var( --e-global-typography-text-font-weight );\">set up a register of incidents relating to the confidentiality of personal data;<\/span><\/li><li>report to the <span style=\"background-color: var( --e-global-color-288e12e ); font-family: var( --e-global-typography-text-font-family ), Sans-serif; font-size: var( --e-global-typography-text-font-size ); font-weight: var( --e-global-typography-text-font-weight ); color: #000000;\"><a style=\"color: #000000;\" href=\"https:\/\/www.cai.gouv.qc.ca\" target=\"_blank\" rel=\"noopener\">Commission d\u2019acc\u00e8s \u00e0 l\u2019information (CAI) du Qu\u00e9bec<\/a><\/span><span style=\"background-color: var( --e-global-color-288e12e ); color: var( --e-global-color-01fc24a ); font-family: var( --e-global-typography-text-font-family ), Sans-serif; font-size: var( --e-global-typography-text-font-size ); font-weight: var( --e-global-typography-text-font-weight );\"> any incident that could cause substantial harm to the individuals concerned. <\/span><br><br><\/li><\/ul><p><strong><em>* Unless otherwise designated, this will be the person with the highest authority within the organization. <\/em><\/strong><\/p><h4><span style=\"color: #8b1d56;\"><strong>Phase 2, effective September 22, 2023 <\/strong><\/span><\/h4><p>Every organization must ensure that it obtains the consent of each individual whose personal information it wishes to hold and use.<\/p><p>This consent may be implied. For example, an NPO must specify, in its privacy policy, the type of information it collects and what it does with it, and then invite people to read this policy. From that point on, anyone who continues to allow the NPO in question to collect his or her personal information is deemed to consent to the privacy policy and to the use of his or her data.  <\/p><p><strong>Please note!<\/strong> <strong>This implicit consent is not sufficient in the case of sensitive information<\/strong>. In such cases, you must: <\/p><ul><li>ensure that consent is explicit and unequivocal;<\/li><li>specify the purposes for which the sensitive information may be used (e.g., for the personnel insurance program, payroll management, invoicing for services, direct mail, etc.);<\/li><li>clearly indicate how long sensitive information will be kept.<\/li><\/ul><p> <\/p><p><strong style=\"color: #8b1d56;\">Phase 3, effective September 22, 2024<\/strong><\/p><p>New obligations relating to the right to portability of personal information are added, as explained by the CAI: \u201cif the person concerned so requests, [the organization must] communicate to him or her, in a structured and commonly used technological format, computerized personal information collected from him or her*\u201d.<\/p><p>The CAI urges us to prepare for this third phase as soon as possible, since it may involve more structuring changes for organizations.<\/p><h3>Truths&#8230;<\/h3><p> <\/p><h4><span style=\"color: #e32328;\"><strong><span style=\"color: #000000;\">1 &#8211; \u201cDoes <em>Law 25 <\/em>concern the confidential information of organizations&#8217; personnel?\u201d<\/span><\/strong><\/span><\/h4><p>Not exclusively. <em>Law 25<\/em> aims to protect the personal information of any individual that is not of a professional nature (e.g.: company e-mail address), regardless of their relationship with the organization that collects and uses the information: client, volunteer, donor, etc. <\/p><h4><span style=\"color: #000000;\"><strong>2- \u201cIs personal information obtained before September 22, 2023 affected by <em>Law 25?<\/em><\/strong><\/span><\/h4><p>Yes, explicit consent is required for any sensitive information held, past or present. Yes, even though it can be difficult for an NPO to obtain explicit consent from its entire list of donors, for example. That said, <em>Law 25<\/em> contains certain provisions that are open to interpretation, and the guidelines of the legal authorities have yet to be published on the subject of consents.   <\/p><p>One thing&#8217;s for sure: we need to show that we&#8217;re serious about complying with <em>Law 25<\/em>, and that protecting personal information is a priority.<\/p><h4><span style=\"color: #000000;\"><strong>3 &#8211; \u201cMy organization has a privacy policy in place to ensure that personal information is protected. I don&#8217;t think we can do any better.\u201d<\/strong><\/span><\/h4><p>Not only can we do better, we must do better. To start with, you need to make sure that everyone in your organization is aware of your policy and applies it &#8211; a policy that&#8217;s just sitting in a drawer is no good in practice. You therefore need to raise staff awareness and keep track of the awareness-raising measures employed.  <\/p><p>What&#8217;s more, as an organization, you need to display this policy prominently on your website (usually in the footer) and at all your information gathering points. Oh, and the <em>Act <\/em>specifies that it must be written in clear language, so no more legalese! <\/p><p>Designating someone on your team to be responsible for protecting personal information, and putting in place a clear and visible policy, is the bare minimum. What happens next depends largely on the type of information you collect and what you do with it. <\/p><p>Jacques Lussier, privacy expert at <a href=\"https:\/\/www.atypic.ca\/fr\/\" target=\"_blank\" rel=\"noopener\">Atypic<\/a>, advises organizations to start by mapping the personal information they hold in order to define:<\/p><ul><li>the type of personal information they use;<\/li><li>the context in which it was collected .<\/li><li>how it is used;<\/li><li>how long it is kept;<\/li><li>the people in the organization who have access to it.<\/li><\/ul><p><br>Marc-Andr\u00e9 Nadeau, an expert on <em>Law 25<\/em> and founder of <a href=\"https:\/\/exactrh.com\/\" target=\"_blank\" rel=\"noopener\">Exact RH<\/a>, agrees: we need to analyze each organization&#8217;s needs in terms of personal information protection, and then know which solutions to apply in accordance with <em>Law 25<\/em>.<\/p><h4><span style=\"color: #000000;\">4 &#8211; <strong>\u201cSo, if we&#8217;re talking about \u2018how long we use personal information\u2019, it means there comes a time when we need to get rid of it?\u201d <\/strong> <\/span><\/h4><p>Exactly. The general idea is to retain only the personal information you use, and only to the extent permitted by current legislation, including <em>Law 25<\/em>. This means that you must effectively anonymize or destroy personal information after a certain period of time, and keep a record of these procedures. <br> <br>&#8211; Speaking of logs, you&#8217;ll also need one to keep track of incidents relating to the security of personal information and note the remedial measures\/mitigation steps put in place for each situation.  <\/p><ul><li>Speaking of logs, you&#8217;ll also need one to keep track of incidents relating to the security of personal information and note the remedial measures put in place for each situation. .<\/li><\/ul><h4><span style=\"color: #000000;\"><strong>5 &#8211; \u201cOur organization deals with third parties for certain services. I imagine that they are responsible for ensuring the protection of personal information exchanged as part of these services?\u201d <\/strong><\/span><\/h4><p>The responsibility is shared. Yes, service providers must comply with <em>Law 25<\/em>, but you must check their compliance before you decide to use them, otherwise your organization is equally liable for any failure to comply. To avoid such a situation, check in advance that their privacy policy is adequate, and provide them with clear written instructions for the use of the personal information you will be exchanging.  <\/p><h3>&#8230; and consequences <br> <br>6 &#8211; \u201cWhat happens if my organization doesn&#8217;t comply with Law 25? <br>Ah, that&#8217;s THE big question.<br><br><\/h3><h4><span style=\"color: #000000;\"><strong>6 &#8211; \u201cWhat happens if my organization doesn&#8217;t comply with <em>Law 25<\/em>? <\/strong><\/span><\/h4><p>Ah, that&#8217;s THE big question.<\/p><p>It&#8217;s important to understand that legal obligations regarding the protection of personal information are not new, and neither are the consequences of non-compliance. Of course, there are additional consequences for non-compliance with <em>Law 25<\/em> in particular. We&#8217;re talking about punitive damages of at least $1,000 imposed by the court in cases of gross negligence or intentional misconduct. The CAI can also add an administrative monetary penalty of up to $10 million, or 2% of worldwide sales in the case of an organization. And that&#8217;s not all: the CAI can also initiate criminal proceedings, which could result in a penalty of between $15,000 and $25 million, or a maximum of 4% of the organization&#8217;s worldwide sales.    <\/p><p>That said, there is no case law specifically relating to <em>Law 25<\/em>, so the next few years will be decisive.<\/p><h2>How do you comply?<\/h2><p>As a general rule, NPOs have limited resources at their disposal, even though they pursue important missions. In this frugal context, their finances dictate the choice to neglect certain files&#8230; and the work to be done to comply with <em>Law 25<\/em> can be overlooked. <\/p><p>Some NPOs are taking risks without even knowing it, in that they&#8217;ve taken a good look at <em>Law 25<\/em>, but haven&#8217;t deciphered all its ins and outs. \u201cPeople have good intentions and work hard, but it&#8217;s complicated and so time-consuming&#8230; In my experience, most organizations that are convinced they&#8217;ve done their homework when it comes to protecting personal information only achieve 25% compliance at most &#8211; maybe that&#8217;s why they call it <em>Law 25<\/em>,\u201d jokes Mr. Nadeau. <\/p><p><span style=\"color: #000000;\">All in all, in light of this information, Engag\u00e9s takes the liberty of issuing a reminder and a word of advice: the personal information your organization uses does not belong to it, so be careful how you handle it. <strong>To determine the level of legal compliance appropriate to your situation and achieve it, don&#8217;t hesitate to call on expert external resources to analyze your file and help you put in place the required mechanisms or corrective measures. <\/strong><\/span><\/p><h3>Thanks to our expert collaborators:<\/h3><p><strong>Jacques Lussier <\/strong><br>Consulting Director &#8211; Data, Business Intelligence and CRM at Atypic <br>jacques@atypic.ca<\/p><p><span style=\"color: #e32328;\"><strong>Marc-Andr\u00e9 Nadeau <\/strong><\/span><br>Founder of Exact RH <br>mnadeau@exactrh.ca<\/p><p><span style=\"color: #000000;\"><strong>___________________________________________________________________________________<\/strong><\/span><\/p><p><em><span style=\"color: #f04e50;\">*<\/span>S<span style=\"color: #000000;\">ource : <a style=\"color: #000000;\" href=\"https:\/\/www.quebec.ca\/gouvernement\/travailler-gouvernement\/travailler-fonction-publique\/services-employes-etat\/conformite\/protection-des-renseignements-personnels\/definitions-concepts\/lexique#:~:text=Un%20renseignement%20personnel%20est%20consid%C3%A9r%C3%A9,respect%20de%20la%20vie%20priv%C3%A9e\" target=\"_blank\" rel=\"noopener\">h<span style=\"color: #450b3e;\">ttps:\/\/www.quebec.ca\/gouvernement\/travailler-gouvernement\/travailler-fonction-publique\/services-employes-etat\/conformite\/protection-des-renseignements-personnels\/definitions-concepts\/lexique#:~:text=Un%20renseignement%20personnel%20est%20consid\u00e9r\u00e9,respect%20de%20la%20vie%20priv\u00e9e<\/span><\/a><span style=\"color: #450b3e;\">.<\/span><br><\/span> <\/em><br><em><span style=\"color: #8b1d56;\">*<\/span><span style=\"color: #000000;\">Source : <span style=\"color: #450b3e;\"><a style=\"color: #450b3e;\" href=\"https:\/\/www.cai.gouv.qc.ca\/espace-evolutif-modernisation-lois\/thematiques\/droit-portabilite\/#:~:text=%C3%80%20compter%20du%2022%20septembre,informatis%C3%A9%20recueilli%20aupr%C3%A8s%20d%27elle\" target=\"_blank\" rel=\"noopener\">https:\/\/www.cai.gouv.qc.ca\/espace-evolutif-modernisation-lois\/thematiques\/droit-portabilite\/#:~:text=\u00c0%20compter%20du%2022%20septembre,informatis\u00e9%20recueilli%20aupr\u00e8s%20d%27elle<\/a>.<\/span><\/span><\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>As an NPO, where do you stand in relation to the Act to modernize legislative provisions as regards the protection of personal information in the private sector, also known as Law 25? It scares me, it seems monstrously big and complicated&#8230; I think we&#8217;ve taken the necessary steps to comply with it. Law 25&#8230; what [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":7199,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[1,408],"tags":[],"class_list":["post-10917","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles","category-employer"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Find out (almost!) everything about Law 25 - Engag\u00e9s<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Find out (almost!) everything about Law 25 - Engag\u00e9s\" \/>\n<meta property=\"og:description\" content=\"As an NPO, where do you stand in relation to the Act to modernize legislative provisions as regards the protection of personal information in the private sector, also known as Law 25? It scares me, it seems monstrously big and complicated&#8230; I think we&#8217;ve taken the necessary steps to comply with it. Law 25&#8230; what [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/\" \/>\n<meta property=\"og:site_name\" content=\"Engag\u00e9s\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/emploisengages\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-10-31T18:51:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-03T15:49:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1800\" \/>\n\t<meta property=\"og:image:height\" content=\"1200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"engagesstg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@mario@atypic.ca\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"engagesstg\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/\"},\"author\":{\"name\":\"engagesstg\",\"@id\":\"https:\/\/engages.ca\/en\/#\/schema\/person\/c6841628a3feadf9ec2b00e6a80c0ac2\"},\"headline\":\"Find out (almost!) everything about Law 25\",\"datePublished\":\"2023-10-31T18:51:53+00:00\",\"dateModified\":\"2026-03-03T15:49:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/\"},\"wordCount\":1887,\"publisher\":{\"@id\":\"https:\/\/engages.ca\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25.jpg\",\"articleSection\":[\"Articles\",\"Employer\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/\",\"url\":\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/\",\"name\":\"Find out (almost!) everything about Law 25 - Engag\u00e9s\",\"isPartOf\":{\"@id\":\"https:\/\/engages.ca\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25.jpg\",\"datePublished\":\"2023-10-31T18:51:53+00:00\",\"dateModified\":\"2026-03-03T15:49:29+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#primaryimage\",\"url\":\"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25.jpg\",\"contentUrl\":\"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25.jpg\",\"width\":1800,\"height\":1200},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/engages.ca\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Find out (almost!) everything about Law 25\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/engages.ca\/en\/#website\",\"url\":\"https:\/\/engages.ca\/en\/\",\"name\":\"Engag\u00e9s\",\"description\":\"Le site d&#039;embauche des OBNL\",\"publisher\":{\"@id\":\"https:\/\/engages.ca\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/engages.ca\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/engages.ca\/en\/#organization\",\"name\":\"Engag\u00e9s\",\"url\":\"https:\/\/engages.ca\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/engages.ca\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/Logo-rouge.png\",\"contentUrl\":\"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/Logo-rouge.png\",\"width\":319,\"height\":106,\"caption\":\"Engag\u00e9s\"},\"image\":{\"@id\":\"https:\/\/engages.ca\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/emploisengages\/\",\"https:\/\/www.linkedin.com\/company\/emplois-engag-s\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/engages.ca\/en\/#\/schema\/person\/c6841628a3feadf9ec2b00e6a80c0ac2\",\"name\":\"engagesstg\",\"sameAs\":[\"https:\/\/engagesstg.wpenginepowered.com\",\"https:\/\/x.com\/mario@atypic.ca\"],\"url\":\"https:\/\/engages.ca\/en\/author\/engagesstg\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Find out (almost!) everything about Law 25 - Engag\u00e9s","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/","og_locale":"en_US","og_type":"article","og_title":"Find out (almost!) everything about Law 25 - Engag\u00e9s","og_description":"As an NPO, where do you stand in relation to the Act to modernize legislative provisions as regards the protection of personal information in the private sector, also known as Law 25? It scares me, it seems monstrously big and complicated&#8230; I think we&#8217;ve taken the necessary steps to comply with it. Law 25&#8230; what [&hellip;]","og_url":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/","og_site_name":"Engag\u00e9s","article_publisher":"https:\/\/www.facebook.com\/emploisengages\/","article_published_time":"2023-10-31T18:51:53+00:00","article_modified_time":"2026-03-03T15:49:29+00:00","og_image":[{"width":1800,"height":1200,"url":"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25.jpg","type":"image\/jpeg"}],"author":"engagesstg","twitter_card":"summary_large_image","twitter_creator":"@mario@atypic.ca","twitter_misc":{"Written by":"engagesstg","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#article","isPartOf":{"@id":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/"},"author":{"name":"engagesstg","@id":"https:\/\/engages.ca\/en\/#\/schema\/person\/c6841628a3feadf9ec2b00e6a80c0ac2"},"headline":"Find out (almost!) everything about Law 25","datePublished":"2023-10-31T18:51:53+00:00","dateModified":"2026-03-03T15:49:29+00:00","mainEntityOfPage":{"@id":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/"},"wordCount":1887,"publisher":{"@id":"https:\/\/engages.ca\/en\/#organization"},"image":{"@id":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#primaryimage"},"thumbnailUrl":"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25.jpg","articleSection":["Articles","Employer"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/","url":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/","name":"Find out (almost!) everything about Law 25 - Engag\u00e9s","isPartOf":{"@id":"https:\/\/engages.ca\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#primaryimage"},"image":{"@id":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#primaryimage"},"thumbnailUrl":"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25.jpg","datePublished":"2023-10-31T18:51:53+00:00","dateModified":"2026-03-03T15:49:29+00:00","breadcrumb":{"@id":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#primaryimage","url":"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25.jpg","contentUrl":"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25.jpg","width":1800,"height":1200},{"@type":"BreadcrumbList","@id":"https:\/\/engages.ca\/en\/articles\/find-out-almost-everything-about-law-25\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/engages.ca\/en\/"},{"@type":"ListItem","position":2,"name":"Find out (almost!) everything about Law 25"}]},{"@type":"WebSite","@id":"https:\/\/engages.ca\/en\/#website","url":"https:\/\/engages.ca\/en\/","name":"Engag\u00e9s","description":"Le site d&#039;embauche des OBNL","publisher":{"@id":"https:\/\/engages.ca\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/engages.ca\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/engages.ca\/en\/#organization","name":"Engag\u00e9s","url":"https:\/\/engages.ca\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/engages.ca\/en\/#\/schema\/logo\/image\/","url":"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/Logo-rouge.png","contentUrl":"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/Logo-rouge.png","width":319,"height":106,"caption":"Engag\u00e9s"},"image":{"@id":"https:\/\/engages.ca\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/emploisengages\/","https:\/\/www.linkedin.com\/company\/emplois-engag-s\/"]},{"@type":"Person","@id":"https:\/\/engages.ca\/en\/#\/schema\/person\/c6841628a3feadf9ec2b00e6a80c0ac2","name":"engagesstg","sameAs":["https:\/\/engagesstg.wpenginepowered.com","https:\/\/x.com\/mario@atypic.ca"],"url":"https:\/\/engages.ca\/en\/author\/engagesstg\/"}]}},"featured_image_src":"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25-600x400.jpg","featured_image_src_square":"https:\/\/engages.ca\/wp-content\/uploads\/2023\/10\/ENGAGES_23_10_loi_25-600x600.jpg","author_info":{"display_name":"engagesstg","author_link":"https:\/\/engages.ca\/en\/author\/engagesstg\/"},"_links":{"self":[{"href":"https:\/\/engages.ca\/en\/wp-json\/wp\/v2\/posts\/10917","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/engages.ca\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/engages.ca\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/engages.ca\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/engages.ca\/en\/wp-json\/wp\/v2\/comments?post=10917"}],"version-history":[{"count":1,"href":"https:\/\/engages.ca\/en\/wp-json\/wp\/v2\/posts\/10917\/revisions"}],"predecessor-version":[{"id":10918,"href":"https:\/\/engages.ca\/en\/wp-json\/wp\/v2\/posts\/10917\/revisions\/10918"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/engages.ca\/en\/wp-json\/wp\/v2\/media\/7199"}],"wp:attachment":[{"href":"https:\/\/engages.ca\/en\/wp-json\/wp\/v2\/media?parent=10917"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/engages.ca\/en\/wp-json\/wp\/v2\/categories?post=10917"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/engages.ca\/en\/wp-json\/wp\/v2\/tags?post=10917"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}