Documents have been prepared at different times. You want to distinguish measures in use, items needing an update and decisions still outstanding.
Quebec Law 25 support
Plan your Law 25 work with Loupe Technologies: review existing practices, set priorities and define responsibilities and implementation steps.
Loupe Technologies helps you prepare a Quebec Law 25 initiative suited to your business. We propose connecting the requirements to examine with your practices, tools and the people responsible for taking action.
The engagement makes the work concrete: understand what already exists, identify gaps to address and prepare implementation steps. We define the scope and the legal reviews needed with you.
Move an incomplete initiative forward
The person responsible for privacy must coordinate several teams. Clear priorities and defined contributions are needed to organize the work.
A new tool, collection practice or automation raises questions about existing arrangements. You want those changes included in the privacy initiative rather than handled separately.
Connect Law 25 work with business operations
We propose reviewing the practices and documents selected for the engagement: responsibilities, information flows, notices to individuals, retention, request handling and incident preparedness. Findings are considered alongside relevant requirements, with interpretation questions identified for review.
The work may then cover an action plan and support for the measures you select. We define the contributions of your organization, its IT teams and those responsible for legal review. Policy content and review arrangements form part of the scoping discussion.
A privacy impact assessment for a system or vendor is a stream to define explicitly. Health information and activities across provincial borders also call for a review of context rather than automatic application of the same program.
Materials to guide the work
Depending on the agreed engagement, deliverables may include the following.
Starting-point assessment
A record of the items examined, available evidence and unresolved questions. Its scope is explained so that missing evidence is not confused with a missing practice.
Action roadmap
Proposed actions, priorities, teams involved and the decisions needed to begin implementation.
Implementation materials
The agreed procedures, working sheets or documents, with their preparation status, remaining reviews and follow-up items.
Clarify, prioritize and put measures into practice
-
Define the business context
We identify the activities, information handling and responsible people to include in the engagement.
-
Examine existing materials
We review selected documents and practices, distinguishing findings, assumptions and information still needed.
-
Agree on priorities
We present possible work and dependencies so that your organization can choose which actions to begin.
-
Support the selected actions
Work proceeds within the agreed scope, followed by a handover of decisions, checks and next steps.
Questions before you get started
Is Law 25 a separate law to apply on its own?
Law 25 amended Quebec’s personal information protection laws. An initiative therefore needs to examine the rules currently applicable to the organization, rather than relying only on the amending legislation or an old task list.
Does the engagement provide compliance certification?
No. The proposal covers a defined review, priorities and agreed support. Deliverables state their scope and outstanding questions; they do not constitute certification or a guarantee of compliance.
Can we start with one specific problem?
Yes. A particular need, such as clarifying responsibilities or organizing request handling, can provide the starting point. Scoping checks the dependencies so that the first piece of work fits into a coherent initiative.
Is a privacy impact assessment included?
Inclusion depends on the engagement. We identify the project, participants and assessment depth before adding it to scope. A general reference to Law 25 does not by itself define the PIA work to be performed.
Sources and references
- Principaux changements aux lois sur la protection des renseignements personnels — Commission d’accès à l’information du Québec
Where does your Law 25 work stand?
Tell us what you have already undertaken and what is holding up the next step. We can clarify the items to examine and the support to consider.