Law 25: Practical Guide for IPS Clinics

Law 25 on the protection of personal information has come into effect in Quebec and imposes new obligations on businesses, including health clinics. Here is a practical guide to ensure your compliance.

What is Law 25?

Law 25 modernizes the legal framework for the protection of personal information in Quebec. It aims to give citizens more control over their data and imposes increased obligations on organizations.

Main Obligations

• Privacy Officer: Designate a person responsible for the protection of personal information in your clinic.
• Privacy Policy: Publish a clear and accessible policy explaining how you collect, use and protect data.
• Consent: Obtain explicit consent before collecting personal information.
• Privacy Incidents: Maintain a register of incidents and notify the Commission d'accès à l'information in case of violation.

Impact on Digital Tools

If you use digital tools (management software, AI assistants, etc.), make sure they comply with Law 25. Prefer solutions hosted in Canada with appropriate security certifications.

Zenicall and Compliance

Zenicall was designed from the start with Law 25 compliance in mind: 100% Canadian hosting, data encryption, controlled access and complete traceability.