Law 25 compliance for Outaouais businesses
Law 25 is Quebec law, and your business is a Quebec business. We handle your compliance from right here in Gatineau, in French, with someone local who answers you directly.
The Outaouais has a wrinkle Law 25 cares about directly: the river. Many local SMBs serve clients, hire staff and use suppliers on both sides — Gatineau and Ottawa — which means personal information crosses a provincial boundary in the normal course of business. That’s the kind of flow the law expects you to assess before it happens. We’re based in Gatineau’s Aylmer sector, we serve businesses across the Outaouais, and we run the whole engagement in French if that’s your working language.
We know that cross-river reality first-hand — no need to explain it to someone who has never had to work under both sets of rules. We keep client data in Canada (Azure Canada Central/East, AWS ca-central-1) and connect the Quebec rules to how you actually operate. For the full mechanics — what each obligation requires and how we deliver it — see our Law 25 compliance service.
A Law 25 consultant based in the Outaouais
One person, based in Gatineau’s Aylmer sector, who carries your Law 25 file from gap review to ongoing governance — and replies to you personally, in your language.
A Quebec firm for a Quebec law
Law 25 compliance isn’t a one-time document drop. It’s easier when the person doing it works under the same rules you do, speaks your language and knows the region you operate in.
- From here, in the region. We map with you where personal information sits in your business, in whichever language your team uses.
- French-native delivery. Policies, your privacy notice, EFVP reports and advisory — written in real Quebec French, not translated after the fact.
- Comfortable in both provinces. We handle the Ottawa-Gatineau data flows that put personal information across a provincial line every day.
- Data kept in Canada. Canadian-owned, with client data hosted in Canada — which makes the cross-border questions Law 25 raises far easier to answer.
Frequently asked questions
Do you handle Law 25 compliance for businesses in the Outaouais?
Yes — that’s who this page is for. We’re based in Gatineau’s Aylmer sector and we work with SMBs across the Outaouais: Gatineau, Hull, Aylmer, and the surrounding communities. Because we’re local, we understand your reality and keep the work proportionate to a small business rather than a province-wide enterprise.
Can you act as our outsourced privacy officer (RPRP) here in Gatineau?
Yes. If you’d rather not assign the Responsable de la protection des renseignements personnels role internally, we can hold it for you — handling access requests, assessing incidents, keeping the register and looking after ongoing governance. Being local means the person holding the role works in your time zone and your language, and answers for your file by name. The full scope of the RPRP role is laid out on our service page.
We do business on both sides of the river. Does Law 25 still apply?
If your business operates in Quebec and collects or holds personal information, Law 25 applies — even when your clients or staff are in Ottawa. The cross-river setup actually raises the stakes, because moving personal information from Gatineau to Ontario can count as a transfer outside Quebec, which Law 25 expects you to assess first. We help Outaouais businesses sort out which flows trigger that obligation and what to document.
Is there still government funding for Law 25 compliance?
The MaLoi25 subsidy program ended on March 31, 2025, so we won’t promise you an active grant. Support programs in Quebec do change over time, and resources like CyberQuébec at Cégep de l’Outaouais still exist, so it’s worth a look — but the honest answer today is to plan the compliance work on its own merits. We scope it to your size so the cost stays reasonable for an SMB.
Where do we start if we’ve done nothing on Law 25 yet?
Start with our free Law 25 self-check to see roughly where you stand, then book a short gap review. We turn the result into a short, prioritized plan — usually naming the privacy officer, putting basic governance in writing, and setting up the breach register first. If you want some background first, our explainer covers the law for SMBs.
Get Law 25 done with a firm next door
Let’s start with a short gap review in French or English, scoped to your business. Call (819) 329-0018 or email [email protected].
Get in touch