Back to guides
Law 25Template
Law 25 privacy policy template
Copy the structure, then replace each line with your real activities. A generic text does not describe your organization.
8 min readSeptember 28, 2026GRC strategy lead, CapGRC
Since 22 September 2023, an enterprise that collects personal information has to make its practices available in clear and simple language. The policy names the person in charge, the purposes, the retention period and how to use the rights. Fill this template from your processing register.
Text to complete
Privacy policy of [organization name] Last updated: [date] Person in charge of the protection of personal information Title: [title] Email: [address read the same day] Phone: [number] Information collected, and why Clients: [categories] for [specific purpose] Employees and applicants: [categories] for [specific purpose] Site visitors: [categories] for [specific purpose] How we obtain it [form, contract, cookie, supplier, purchased list] Who we communicate it to [recipient role, for example host, payroll, accounting firm] Communication outside Quebec: [yes or no]. Destination: [province or country]. Retention [category]: [period, or the criterion used to set it] Your rights Access, correction and withdrawal of consent. Portability when the information is computerized and was collected from you. Address for requests: [email] Response time: 30 days. Technologies We use [name or type] that can [identify, locate or profile]. To activate these functions: [means offered to the person].
Before you publish
- Each purpose matches an activity you actually carry out.
- The person named is the same one published elsewhere on the site.
- A communication outside Quebec, including to another province, is stated in the policy. The written assessment is kept separately.
- The link stays stable in the footer. The published version is the one your teams apply.
A starting point to adapt. This template does not replace legal advice on your activities.
A policy that follows the register
CapPRP links activities, retention periods and the published text.