← Articles
ComplianceJanuary 15, 2026· 5 min read

Law 25 Compliance: What Professionals Need to Know

Law 25 imposes new obligations on Quebec organizations. Here is what accountants, lawyers, notaries and healthcare professionals must implement to be compliant.

Since September 2023, Law 25 (An Act to modernize legislative provisions as regards the protection of personal information) is fully in force in Quebec. It applies to any organization that collects, uses or communicates personal information in the course of its activities — including independent professionals and SMBs.

Who is affected?

Law 25 applies to all Quebec organizations, regardless of size. Accountants, notaries, lawyers, brokers, financial advisors, healthcare professionals — if you collect information about your clients, you are affected.

The 4 main obligations

  • Designate a person responsible for the protection of personal information
  • Publish an accessible privacy policy
  • Obtain explicit consent before collecting data
  • Notify the Commission d'accès à l'information (CAI) in the event of a privacy incident

How Filvacy helps

Filvacy is designed to reduce your exposure to Law 25 risks. Your clients' documents are end-to-end encrypted, hosted in Canada (AWS ca-central-1), and automatically deleted according to the deadlines you configure. No document is transmitted in plain text.

Important: Filvacy is a compliance tool, not a legal advisor. For a complete assessment of your obligations, consult a lawyer specializing in data protection.

Also available in:FrançaisEspañol