Law 25 — Privacy Policy

Overview

Draft and update a public privacy policy in line with Quebec Law 25 (Bill 64). Covers purposes, rights, retention, complaints, and Privacy Officer contact. Includes validation for required elements.

Getting Started

Add your source materials to the project workspace, then activate the Law 25 — Privacy Policy skill. The agent will guide you through the process step by step.

Example conversation

You: We’re a Quebec-based company and need a public privacy policy that meets Law 25. We collect names, emails, and order data; we have a Privacy Officer and a complaints process.

Agent: I’ll draft the policy using the Law 25 requirements reference and the template. I’ll include: your enterprise name, purposes for collection and use, how individuals can exercise their rights (access, correction, withdrawal of consent, complaint), retention and destruction, the complaints process and reference to the CAI, and the Privacy Officer contact. Then I’ll run the validation tool to confirm all required elements are present.

Output excerpt

Privacy Policy (excerpt)
6. Privacy Officer (person in charge of the protection of personal information)
For any request regarding your personal information or this policy: Email: privacy@example.qc.ca

3. Your rights
You may, at any time: Access your personal information and obtain confirmation that we hold it. Request correction of inaccurate or incomplete information. Withdraw consent where processing is based on consent. Lodge a complaint with us or with the Commission d’accès à l’information du Québec (CAI).
How to exercise your rights: Contact our Privacy Officer (see section 6). We will respond within a reasonable time as required by Law 25.

References and validation

• references/law25-privacy-policy-requirements.md — Obligation to have a public policy; content expectations (transparency, rights, retention, complaints, Privacy Officer); accessibility and clarity.
• assets/template_privacy_policy_law25.md — Template with sections for enterprise, purposes, collection/use/communication, rights, retention/destruction, complaints, Privacy Officer contact, amendments.
• validate_law25_privacy_policy — Checks the policy document for: rights of individuals (access, correction, withdrawal of consent, complaint), Privacy Officer and contact (e-mail or other means), retention and destruction, and complaints process (including reference to CAI). Reports missing elements. Use after drafting or updating the policy.