Breach Notification Deadline Calculator
Law 25 confidentiality-incident triggers, clocks, and who to notify, in plain language, plus a client-side incident-register generator.
Open the toolTopic hub
Quebec Law 25
Quebec's private-sector privacy law has finished phasing in. Portability rights, privacy-by-default settings, and penalties with real teeth are all live, and the CAI is publishing what it does about violations. Everything on this site about Law 25 lives here: the enforcement record, free readiness tools, machine-readable requirements, and practitioner notes.
The record
Enforcement, tracked weekly
Fines make headlines, but the day-to-day signal is quieter: the orders and decisions the CAI publishes when Quebec organizations get personal information handling wrong, and the PIPEDA findings the federal OPC publishes when businesses do. Every entry is a real, published regulatory action linked to its official source.
Free to use
Law 25 tools
Privacy Policy Grader
11-check heuristic review of privacy policies against Law 25 and PIPEDA expectations.
Open the toolCookie-Banner Auditor
Score any site's cookie banner against Law 25 opt-in expectations, with published methodology.
Open the toolRights-Request Generator
Bilingual access and correction request letters under Law 25 and PIPEDA, with the correct statutory references.
Open the toolJargon Decoder
Paste any privacy text; 50 Law 25, PIPEDA, OPC, and CAI terms get plain-language definitions.
Open the toolFor developers
Machine-readable requirements
The Law 25 readiness checklist is available as a queryable API endpoint and through the MCP server: GET /api/v1/law25/checklist, filterable by category. Free base quota, no signup.
Vocabulary
Work with me
Law 25 readiness, without the guesswork
I help Canadian organizations get Law 25-ready: gap assessments, confidentiality-incident playbooks, policy rebuilds, and governance that survives a CAI inquiry. Match your challenges to services with the configurator, or book a discovery call.