Since September 22, 2024, all provisions of Law 25 have been in force. Any Quebec organization that collects personal information — even a simple email address through a contact form — is subject to these requirements. According to the Fédération des chambres de commerce du Québec, nearly 40% of businesses do not fully master their obligations. This audit gives you an honest, jargon-free assessment and a prioritized action plan.