Free tool

Is your organization ready for Law 25?

Ten questions, three minutes. Everything is computed in your browser: no answer is sent to us.

Question 1/10 Have you designated a person in charge of the protection of personal information?

Mandatory since September 2022. Otherwise, the person with the highest authority holds the role.

Question 2/10 Do you have a published, up-to-date privacy policy?

Public, it explains what you collect and why.

Question 3/10 Do you keep a register of privacy incidents?

And a process to notify the Commission d’accès à l’information and the people affected.

Question 4/10 Can you answer a request for access or correction?

A person may ask to see or correct their information.

Question 5/10 Do you assess privacy factors before adopting a new system?

Required for projects that involve personal information.

Question 6/10 Do you know which country your email and files are stored in?

It is often the first question of an assessment.

Question 7/10 Do you know which law the provider hosting them operates under?

A data centre in Canada can belong to a foreign company, subject to its own law.

Question 8/10 Have you set retention periods and a way to destroy information?

Information is not kept forever "just in case".

Question 9/10 Are your staff and volunteers trained on protecting information?

Many incidents come from human error.

Question 10/10 Do you collect only the information you need, with clear consent?

Just what is needed, for a specific purpose.

This tool helps you see where you stand. It is not legal advice.

Talk it over with us

We look with you at where your data lives and what should change, with no commitment.

Write to us