Entry-into-force timeline
Law 25 came into force in stages. Today, everything applies.
| Date | Main provisions |
|---|---|
| 2022-09-22 | Designation and publication of the RPRP, management and register of confidentiality incidents |
| 2023-09-22 | Stronger consent, transparency, PIAs, protection by default, automated decisions, anonymization, transfers outside Québec, penalties and civil remedy |
| 2024-09-22 | Right to data portability |
Key points
- There is no grace period any more: obligations are in force.
- The CAI can impose administrative penalties; courts can impose penal fines; individuals can seek redress in court.
Detailed legal framework: see the reference guide — Entry-into-force timeline.