Is your website compliant with Law 25?

Friday, September 22, 2023

Today, September 22, 2023, the second part of the Act to modernize legislative provisions relating to the protection of personal information, also called Bill 25, comes into force. The modifications made by Bill 25 are gradually coming into force. in force since 2022 and extend over a period of three years, i.e. until 2024.

The Quebec Access to Information Commission reminds the population, businesses and public organizations that this important reform modernizes the rules that protect citizens' personal information. Companies therefore have an obligation to respect these new provisions.

If you have not already done so, you must make changes to your site in order to comply with these new provisions. We therefore recommend that you ensure that you have carried out the following actions:

• Create a resolution to appoint a person responsible for the data and clearly indicate how to communicate with them;
• Explain to your visitors how to access their personal data;
• Explain to your visitors how its data is used as well as the life cycle of its data;
• Allow your visitors to request that errors in their data be corrected;
• Explain to your visitors how to inform you that they wish to limit the processing of their data;
• Explain how we obtained and how we use their personal data;
• Allow your visitors to refuse certain uses of their personal data;
• Allow your visitors to request the removal of their data;
• Ensure you have informed consent on the use of data;
• Keep a record of all breaches or accidents related to unauthorized access to personal data;
• If a breach or unauthorized access to personal information that could create serious harm is detected, inform the Commission for Access to Information (CAI);
• If biometrics are used (for employee identification for example), inform the Commission for Access to Information (CAI).

Other actions could be taken on your side, we recommend that you validate everything with your lawyers to be reassured.

Knowing this, Numérique.ca is able to help you, among other things, to install a cookie banner to allow your visitors to refuse certain uses of its data and to obtain direct consent from your users in order to comply with certain provisions. of the new law. We're talking about 1 hour of work to prepare, configure and install the tool in question. Subsequently, depending on the number of page views of your site, the monthly costs can be free for sites with less than 25,000 page views per month, or cost between $10 and $40 per month for sites with more pages. views.

If you do not yet have a banner installed on your site, contact us today so that we can help you comply with these new regulations.