About this courseCourse overview
Quebec's Law 25 modernised the province's private sector privacy law in three phases between 2022 and 2024. It applies to organisations that collect, use or share personal information about people in Quebec, wherever the organisation is based.
This online course walks through each obligation in practical terms: naming the person in charge of personal information, publishing governance policies, running privacy impact assessments, handling confidentiality incidents and keeping an incident register.
Later modules cover consent, transparency, automated decisions, transfers outside Quebec and the rights individuals can exercise, including data portability.
The course also explains enforcement, including administrative monetary penalties and fines that can reach up to $25 million or 4% of worldwide turnover for the most serious offences.
OutcomesWhat you'll learn
- Explain who Law 25 applies to and what it changed
- Describe the role of the person in charge of personal information
- Run a privacy impact assessment when the law requires one
- Manage confidentiality incidents and keep the incident register
- Obtain valid consent and respect individual rights, including portability
- Understand penalties and enforcement by the Commission d'accès à l'information
Regulatory alignmentLaws and regulations covered
General education based on the current official texts and guidance. It is not legal advice.
AudienceWho this course is for
- Organisations that collect personal information about people in Quebec
- Privacy officers and compliance teams
- HR, marketing and IT staff who handle personal information
- Business owners outside Quebec with Quebec customers
CurriculumWhat's inside the course
1Law 25 at a glance3 lessons
- Who it applies to
- The three phases
- The Commission d'accès à l'information
- Module quiz
2Governance3 lessons
- The person in charge of personal information
- Policies and practices
- Privacy impact assessments
- Module quiz
3Confidentiality incidents3 lessons
- What counts as an incident
- Notification
- The incident register
- Module quiz
4Consent and rights3 lessons
- Valid consent
- Transparency and automated decisions
- Access, correction and portability
- Module quiz
5Transfers and enforcement3 lessons
- Transfers outside Quebec
- Penalties and fines
- Final assessment
- Module quiz
Before you startRequirements and assessment
Requirements
No prior experience required. Lessons start from the basics and build towards practical application at work.
Assessment
A short quiz after each module and a final assessment. Pass mark: 70%, with up to 3 attempts.
IncludedCertificate of Completion
Complete all lessons and score 70% or more in the final assessment, and your Certificate of Completion is issued instantly in your account. It shows your name, the course title, the issue date and a unique certificate ID, as an A4 page you can print or save as PDF for your training records.
- 1Complete the lessons
- 2Pass the final (70%+)
- 3Download your certificate
It records completion of an on demand online course. It is not a professional licence, designation or accreditation, and Charter Compliance Academy is not affiliated with any government body or regulator.
FAQFrequently asked questions
Does Law 25 apply to businesses outside Quebec?
It can. If your organisation collects personal information about people in Quebec, Law 25 may apply even if you are based elsewhere.
Is the course available in French?
The course is in English for now.
Is this legal advice?
No. It explains the law in plain English. Speak with a lawyer about your specific situation.
Who should take it?
Privacy officers first, then staff in HR, marketing, IT and customer service who handle personal information.
Training a team?
Group enrolment, progress reports and invoices in Canadian dollars.
