Make sure your website complies with Quebec's Law 25 for privacy
Here's what you need to know about Law 25 and how Webistry can help you stay compliant.
Quebec's Law 25 is a legislative act that aims to transform the rules governing the collection, use, and disclosure of personal data in Quebec.
It was adopted into law in September 2021 and has a three-year roll-out period starting in 2022, with the second phase having come into effect on September 22, 2023.
IN SUMMARY
What's Law 25?
How Webistry can help
Law 25 requires businesses to obtain consent prior to the collection, use, or disclosure of personal information, including data collected through cookies.
The requirements
Scan your website against a 100,000+ cookie database
Display a custom cookie banner to get opt-in consent
Show a consent revisit widget for users to withdraw consent
Auto-block all third-party cookies before user consent
Schedule cookie scanning for continuous compliance
Document consent logs for regulatory audits
Use pre-built, legally compliant cookie and privacy policy templates
2. We create your website’s cookie banner and deploy it to all your web pages.
1. Sign up to Webistry’s partner Consent Management Platform (CMP), a 3rd party platform that costs $10 USD/month/domain.
3. We design, create, and integrate privacy and cookie policy pages on your website and/or landing pages.
4. We set up Google Tag Manager on your website, following Quebec’s Law 25 and Google Consent Mode v2.
5. We make sure Google Ads and GA4 recognize the implementation of Google Consent Mode.
© Webistry. All rights reserved.
Privacy Policy
Verify your Quebec Law 25 compliance with a free audit
We’ll review your website and get back to you with a free audit of your compliance status.
Automate consent management
Ensure up-to-date and ongoing compliance with Law 25’s requirements for consent by automating your consent management.
Auto-block all third-party cookies before user consent
Schedule cookie scanning for continuous compliance
Document consent logs for regulatory audits
Use our pre-built, legally compliant policy templates
Generate your privacy policy and cookie policy in minutes
Simply copy-paste the legal policies to your website
Under Quebec Law 25, businesses should demonstrate transparency and inform how they collect, use, or disclose users’ personal information.
Generate a compliant privacy policy
POTENTIAL PITFALLS
What's the penalty for non-compliance?
Under Law 25, the Commission for the Protection of Personal Information of Quebec (CPQPI) can impose administrative fines for non-compliance. Private-sector organizations may face administrative fines up to $10 million CAD, or an amount equivalent to 2% of their global turnover for the previous fiscal year, whichever is higher. Individuals can be subject to fines of up to $50,000 CAD.
The CPQPI may institute criminal proceedings for more serious breaches of the law. The fines for penal offenses can go between $15,000 to $25 million CAD, or 4% of an entity’s worldwide turnover from the preceding fiscal year, whichever is greater. Repeat violations can result in doubled fines.
Individuals who believe their privacy rights have been violated under Law 25 can file a complaint with the CPQPI. Additionally, the CPQPI has the authority to conduct inspections and audits of organizations to ensure compliance with the law.
"We are incredibly grateful to Webistry for their expertise and dedication in helping us achieve compliance with Law 25."
JAMES GAGNé
Director of IT, Store Urbain
Two birds with one stone: Google Consent Mode
Fortunately, with Quebec’s Law 25 and Google’s Cookie Deprecation, Google has introduced Consent Mode, enabling websites to adjust Google tags based on user consent and comply with privacy regulations. Though not legally required by Law 25, Google Consent Mode v2 helps in meeting the law's consent and transparency requirements.
Another challenge: Google's Cookie Deprecation
Since January 2024, Google has been gradually removing third-party cookies, aligning with Quebec's Law 25. Without cookies, your website can't track user activities without explicit consent. While only 1% of browsers are currently affected, the pace of change is accelerating, requiring proactive measures.
Failure to address this will negatively impact your online performance and visibility.
Checklist for overall compliance
Law 25 requires businesses to obtain consent prior to the collection, use, or disclosure of personal information, including data collected through cookies.
Conduct a Privacy Impact Assessment
Implement privacy by default
Allow users to easily withdraw consent
Obtain user consent for cookies
Law 25-compliant website pages with your privacy policy and cookie policy
Framework to enable notifying regulatory authority and users of data breach
Detailed log of all obtained consent
$10K
UP TO
UP TO
$50M
UP TO
$25M
Fines for private-sector firms
Fines for individuals
Fines for penal offenses
1
Sign up to Webistry’s partner Consent Management Platform (CMP).
We create your website’s cookie banner and deploy it to all your web pages.
We design, create, and integrate privacy and cookie policy pages on your website and/or landing pages.
We set up Google Tag Manager on your website, following Quebec’s Law 25 and Google Consent Mode v2.
We make sure Google Ads and GA4 recognize the implementation of Google Consent Mode.
2
3
4
5
Consent Mode's role in cookie deprecation and Law 25 compliance
1) Protecting your Ad Performance from a Cookieless Future: Consent Mode readies websites for a future with diminished third-party cookie effectiveness. Securing user consent now ensures continued delivery of personalized experiences and targeted ads.
2) Google Policy Compliance: Accounts that do not implement Consent Mode will lose certain features and may eventually be disabled by Google. This is a mandatory policy enforced by Google.
3) Compliance with Local Legislation: Consent Mode enables a geo-targeted cookie policy based on the user's location.
Their thorough understanding of the legal requirements and their professional approach ensured our web properties are fully compliant. Thanks to their support, we can confidently assure our users of the highest standards in data privacy and security. Thank you, Webistry, for your exceptional service!
Our setup features
Questions? Call us at: