Québec · Legislation

Québec Law 25 (CAI enforcement)

Québec Law 25 (CAI enforcement) has been enacted.

The Commission d'accès à l'information signalled in early 2026 that routine compliance audits under Law 25 §70 would increase, especially around AI-driven automated decision-making (§12.1, §14) and cross-border transfers outside Quebec (§17). Penalties reach C$10 million or 2% of worldwide turnover, with repeat offences up to C$25 million.

Official title

Quebec Law 25 — 2026 AI and Cross-Border Enforcement Push

Bill details

Stage
Enacted
Policy area
Privacy
Last updated

Primary sources

Read the bill text and legislative history at the source.

Ask about this bill

Put this record in front of EcoGPT and ask follow-up questions.

What would Québec Law 25 (CAI enforcement) require of companies that handle personal data?

Records current as of . The bill text and legislative history are linked below.