Quebec Privacy LawGuide for Small Business
Who's behind law25.ca, how the content is checked, and how often it's reviewed.
· IT & cybersecurity for Quebec SMBs since 1995
Law 25 applies to every business in Quebec that handles personal information, yet most of the material explaining it is written for lawyers or large enterprises. This site translates the law into plain language for small and medium businesses: what it actually requires, what the regulator checks first, and where to start.
It's an independent educational resource. It isn't affiliated with the Quebec government or the Commission d'accès à l'information (CAI), and nothing here is legal advice.
law25.ca is published and maintained by MTech Cyber, an IT and cybersecurity services provider working with Quebec small and medium businesses since 1995. A large part of MTech Cyber's day-to-day work is helping SMBs meet the security and privacy obligations described on this site, which is where the practical examples come from.
Content is written from the law itself (the Act respecting the protection of personal information in the private sector, P-39.1, as amended by Law 25), CAI guidance and published enforcement decisions, and analyses from Canadian privacy law firms. Claims about penalties, deadlines, and obligations link to primary sources wherever practical; the Resources page lists the official ones.
The full site is reviewed quarterly by Randal Wark, Managing Partner, MTech Cyber, and updated between reviews when something significant changes, such as a new regulation, a notable CAI decision, or federal legislation that affects Quebec businesses. Every page shows its last review date in the footer.
Questions, corrections, or suggestions are welcome: info@mtechcyber.com or 514 447 3366. For questions about how this site handles your own information, see the Privacy Policy or write to privacy@mtechcyber.com.