# Quebec Law 25 (S.Q. 2021, c. 25): provisions on decisions based exclusively on automated processing and biometric systems

- **Record type**: Policy instrument
- **Jurisdiction**: Quebec (Canada)
- **Instrument type**: Act / statute
- **Status**: In force
- **Binding**: Yes
- **Issuing body**: National Assembly of Quebec
- **Adopted**: 2021-09-22
- **In force**: 2023-09-22
- **Applies from**: 2023-09-22

## In brief

Quebec Law 25 (automated decisions and biometrics) is a binding act of Quebec (Canada), issued by the National Assembly of Quebec. It has been in force since 22 September 2023. Enterprises and public bodies in Quebec using personal information in exclusively automated decisions or biometric systems.

## Summary

Section 12.1 of the private-sector privacy act (as amended by Law 25, in force 22 September 2023) requires any enterprise that uses personal information to render a decision based exclusively on automated processing to inform the person no later than when the decision is made, and, on request, to tell them what personal information was used, the reasons and principal factors and parameters, and their right to have the information corrected, and to give them an opportunity to submit observations to a person who can review the decision. Biometric identification databases must be declared to the Commission d'accès à l'information 60 days before use, and privacy impact assessments are mandatory for projects involving personal information. Penalties reach CAD 25 million or 4% of worldwide turnover.

## Scope

Enterprises and public bodies in Quebec using personal information in exclusively automated decisions or biometric systems.

## Key dates

2021-09-22: assented; 2022-09-22: first provisions; 2023-09-22: automated-decision provisions in force; 2024-09-22: data portability.

## Penalties

Administrative monetary penalties up to CAD 10 million or 2% of worldwide turnover; penal fines up to CAD 25 million or 4% of worldwide turnover.

## Notes on dates

Dates are taken from the linked official source; a reviewer should confirm in-force and application dates before relying on them.

## Provenance

- **Permanent id**: AIPT-POL-0039 (https://aipolicytracker.org/id/AIPT-POL-0039; never changes or gets reused)
- **Record page**: https://aipolicytracker.org/policies/ca-quebec-law-25-automated-decision-provisions
- **Official source**: https://www.publicationsduquebec.gouv.qc.ca/fileadmin/Fichiers_client/lois_et_reglements/LoisAnnuelles/en/2021/2021C25A.PDF
- **Source document**: S.Q. 2021, c. 25
- **Published by**: Publications Québec
- **Review status**: verified
- **Confidence**: high
- **Facts last confirmed**: 2026-09-26
- **Confirmed by**: Bhaskar Bhatt (see https://aipolicytracker.org/reviewers)
- **Retrieved**: 2026-10-27
- **Licence**: https://creativecommons.org/licenses/by/4.0/
- **Cite as**: AIPolicyTracker (2026). "Quebec Law 25 (S.Q. 2021, c. 25): provisions on decisions based exclusively on automated processing and biometric systems" [AIPT-POL-0039, record version 1, verified 26 September 2026 by Bhaskar Bhatt]. https://aipolicytracker.org/id/AIPT-POL-0039 (accessed 27 October 2026).

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.