Law 25 (formerly Bill 64) is a Québec legislative reform that modernizes existing provisions relating to the protection of personal information. It has been coming into force progressively since September 2022.
The protection of personal information is now a legal obligation for all organizations subject to this law.

In this context, the role of the Person Responsible for the Protection of Personal Information (PRPPI) is central within the organization. It is no longer merely a formal designation, but a strategic function involving the implementation of structured governance, oversight of organizational practices, and management of risks related to personal information.

This training is intended for the Person Responsible for the Protection of Personal Information (PRPPI), as well as for individuals called upon to assume this responsibility. Its objective is to support participants in understanding legal requirements and structuring a compliance approach tailored to their organization, particularly with respect to the collection, use, disclosure, retention, and protection of personal information in the workplace.

The training covers, in particular:

• The legal framework and fundamental principles of Law 25
• Identification and management of personal information
• Rules governing collection, use, disclosure, and consent
• Implementation of policies, registers, and governance mechanisms
• Management of privacy incidents and reporting obligations
• Rights of individuals and organizational responsibilities

Through structured modules, practical tools, and real-world examples, this training enables participants to move from theoretical understanding to operational implementation.
It is part of a proactive governance approach aimed at protecting the organization, its leadership, and the individuals concerned, while strengthening an internal culture of compliance.

__________________________________
Eligible Training Expense – 1% Training Law
“Quebec employers subject to the Act to promote workforce skills development and recognition must invest at least 1% of their payroll in eligible training activities.”

By the end of this training, participants will be able to:

• Understand the key requirements of Quebec’s Law 25 and how they apply within an organization
• Identify and assess personal information, including its nature and level of sensitivity
• Understand the role of the Privacy Officer and the responsibilities of the various stakeholders within the organization
• Establish appropriate governance and manage the lifecycle of personal information, from collection through destruction
• Assess privacy risks and apply appropriate mechanisms, including Privacy Impact Assessments (PIAs)
• Manage privacy incidents and determine the appropriate measures, reporting obligations, and required follow-up
• Ensure compliance with individuals’ privacy rights and the organization’s transparency obligations
• Support and document the organization’s compliance efforts to demonstrate adherence to the requirements of Law 25

This training is primarily intended for:

• Privacy Officers and individuals responsible for the protection of personal information
• Executives and managers responsible for governance and compliance
• Professionals working in human resources, information technology, security, and administration
• Individuals involved in implementing or monitoring compliance with Quebec’s Law 25
• Self-employed individuals and professionals responsible for managing personal information as part of their activities

This training is based on an active and accessible learning approach, combining:

• Simplified and contextualized theoretical content
• Concrete examples drawn from everyday professional situations
• Interactive activities (questions, scenario analyses)
• Realistic case studies that encourage critical thinking
• A knowledge assessment with educational feedback

This approach is designed to promote understanding, retention, and the adoption of secure behaviors.

The assessment of learning is based on:

• Questions integrated throughout the training
• Validation activities with feedback
• A final knowledge assessment covering the key concepts at the end of the course

• A computer or tablet with a reliable Internet connection. Use of a mobile phone is possible, but some content may not be fully optimized for small screens.
• An up-to-date web browser (Chrome, Edge, Safari, or Firefox recommended)
• Speakers or headphones to access audio and video content
• A notebook or digital note-taking tool (optional, for personal learning)
• Access to the course platform (login credentials provided after registration)

A certificate of completion is issued at the end of the training, provided that the course has been completed and, where applicable, the knowledge assessment has been successfully passed.

Downloading the certificate is also conditional upon completing a short survey regarding overall satisfaction with the training.

Once the survey has been submitted, the certificate may be downloaded in PDF format. It remains accessible at all times from the “My Courses” section for future downloads. It is also possible to contact the support team to request an additional copy.

Certificates are retained in the records for a period of six years, or for the duration associated with the certificate or awarded credits, as applicable.

At the end of the module, the participant is invited to complete a short survey evaluating overall satisfaction with the training, with the objective of:

• Measuring overall satisfaction
• Collecting feedback
• Continuously improving course content and instructional methods