PIPEDA and Law 25

Short answer

PIPEDA is Canada's federal private-sector privacy law, and Law 25 is Quebec's stricter provincial privacy law. Together they govern how organizations collect, use and disclose personal information in Canada. Law 25 adds tougher requirements on consent, transparency, privacy impact assessments and penalties for businesses handling Quebec residents' data.