What is Quebec Law 25?

Quebec Law 25, formerly Bill 64, modernizes privacy rules for organizations that handle the personal information of Quebec residents. It introduces obligations that go beyond older federal standards, including appointing a person responsible for privacy, obtaining clear consent, reporting confidentiality incidents, conducting privacy impact assessments for certain projects, and honouring rights such as access, correction, and data portability. It also requires transparency about automated decision-making and imposes significant penalties for non-compliance. For dealerships operating in Quebec or handling Quebec customers' data, Law 25 affects how you collect credit applications, run marketing, use CRM data, and manage vendors. Dealers should designate a privacy lead, document consent, and ensure their technology partners meet the standard. Treating Law 25 as a baseline strengthens privacy practices across every province you operate in.