Quebec, Canada
Continuous Quebec Law 25 monitoring for your websites
Privacy by default: identification, location, and profiling technologies must be off until activated, disclosed in advance, and cross-border transfers assessed.
Act respecting the protection of personal information in the private sector — CQLR c. P-39.1 (as amended by Law 25)
What PrivacyRadar detects
- Tracking technologies active by default on first load (s. 9.1)
- Profiling technologies (session replay, fingerprinting) without prior disclosure (s. 8.1)
- Tracking that continues after explicit refusal (s. 14 consent validity)
- Missing confidentiality policy while personal information is processed
- Vendors outside Canada receiving personal information without assessment context (s. 17)
Why continuous beats annual
Law 25's privacy-by-default standard is stricter than GDPR's in practice: a single tag-manager change that arms a pixel on load is exactly what regulators test for. Only per-deploy monitoring catches that the day it happens.
Every finding carries its statute reference, concrete remediation, and hashed evidence artifacts. Findings describe observed technical behavior — PrivacyRadar does not provide legal advice.
Start monitoring for Quebec Law 25 today.
Enable the rule pack in settings; findings appear on your next scan.