Quebec Law 25 (Loi 25): Complete Compliance Guide for Businesses (2026)
· Alexandre Sauvageau
Loi 25 Quebec: fines up to $25M, 3 phases now in effect. Complete guide to obligations, rights, breach rules & AI email compliance for Quebec businesses.
Quebec's Loi 25 is the strictest privacy law in North America — with fines up to $25M CAD. All three phases are now in effect. This complete guide covers every mandatory obligation, your rights, the enforcement timeline, and how AI email tools must comply.
What is Loi 25 and why it matters more than GDPR for Canadians
The three-phase timeline: what changed and when
Enforcement architecture: two-tier penalties, private lawsuits, and personal liability
Data handling obligations: inventory, anonymization, and cross-border risks
What Loi 25 means specifically for AI email tools
Your rights under Loi 25: what you can demand from any AI tool
How Agentys was built for Loi 25 from day one
Loi 25 is not a bureaucratic checkbox. It's the strongest privacy protection available to North Americans, and the most relevant law for anyone trusting AI with their inbox. It grants you enforceable rights over your data: access, rectification, deletion, portability, de-indexation, and human review of automated decisions. When you choose an AI email tool, demand Loi 25 compliance as the baseline, not a bonus. Agentys meets every requirement — all three phases — because we believe your email data belongs to you. Period.