What Law 25 brought new to Quebec
Effective Sept 2022-2024 (phased): Quebec's existing Act respecting access to documents + protection of personal information was substantially amended. New: privacy officer requirement, privacy impact assessments (PIAs) for high-risk activities, breach notification within reasonable time, data portability rights, right to be forgotten in some contexts, biometric notification, automated decision-making notification.
Privacy officer designation
Per Law 25 Art 3.1, organizations must designate a person responsible for personal information protection. Koydo's appointed privacy officer is identified at /trust-center; Quebec controllers can contact directly for Law-25 specific inquiries.
Privacy impact assessment requirement
Per Law 25 Art 3.3, organizations must conduct privacy impact assessments before deploying technology that processes personal information of high-risk profiles (minors, biometric data, large-scale processing). Koydo's K-12 surfaces meet this threshold; PIAs are available to Quebec controllers on request.
Breach notification within reasonable time
Per Law 25 Art 7, breach notification is required to the affected individuals + the Commission d'accès à l'information du Québec within reasonable time of becoming aware of a confidentiality breach posing risk of serious injury. Koydo's commitment: notify Quebec controllers within 48 hours of confirmed material breach, supporting their notification to the Commission within their statutory window.
Cross-border transfer rules
Per Law 25 Art 17, transferring personal information outside Quebec requires the receiving party to provide protection equivalent to Quebec law. Koydo's standard DPA + Quebec addendum documents equivalent-protection commitments for Quebec → US (Koydo's US-based infrastructure) + Quebec → EU (some sub-processors).
How Quebec schools + universities engage
Quebec K-12 + CEGEP + university institutions engage via the standard Réseau de l'informatique (RISQ) procurement framework or institution-specific DPAs. Koydo provides Quebec-specific addendum (Law 25 + Loi sur l'accès language) on request. Quebec language-program institutions (Alliance Française, Goethe-Institut Quebec, etc.) often engage individually.