Skip to main content

Data Processing Agreement — Quebec (Law 25 / CQLR c P-39.1)

Data Processing Agreement — Quebec (Law 25 / CQLR c P-39.1)

Entente de traitement des renseignements personnels — Law 25 s. 18.3

DATA PROCESSING AGREEMENT

Entente de traitement des renseignements personnels — Law 25 (CQLR c P-39.1), s. 18.3

This Data Processing Agreement ('DPA') is entered into as of [Agreement Date], between:

CONTROLLER (Organisation): [Controller Name], [Controller Address] | CPO: [Controller CPO]

PROCESSOR (Prestataire de services): [Processor Name], [Processor Address]

1. MANDATE AND PROCESSING SCOPE

Mandate: [Mandate Description]

Types of personal information: [Personal Info Types]

Data subjects: [Data Subjects]

Authorized purpose: [Processing Purpose]

The Processor may only process personal information for the purpose of the mandate described above. Any use for other purposes is strictly prohibited under Law 25, s. 18.3.

2. SECURITY MEASURES

The Processor implements the following security measures appropriate to the sensitivity of the personal information: [Security Measures]

Privacy incident notification: The Processor shall notify the Controller of any privacy incident (confidentiality incident) within [Breach Notification Period] of becoming aware. The notification must include: nature of the incident, personal information affected, persons affected, measures taken to reduce risk of harm, and estimated timeline for remediation.

The Controller is responsible for notifying the Commission d'accès à l'information (CAI) and affected individuals as required by Law 25, ss. 3.5-3.8.

3. SUB-PROCESSORS

Sub-processor rule: [Sub-Processor Rule]

Any authorized sub-processor must be bound by data processing obligations equivalent to those in this DPA.

4. RETENTION AND RETURN OF DATA

Retention: [Retention Period]

Return / deletion on mandate end: [Return/Deletion Method]

Administrative monetary penalties under Law 25 may reach up to $10 million CAD or 2% of worldwide turnover for violations. The Processor indemnifies the Controller for any penalties attributable to the Processor's breach of this DPA.

Controller (Organisation)

________________

Signature

Processor (Prestataire de services)

________________

Signature

Maintained by Vladislav Sergienko, Founder·Template last modified: ·Report an error

What Is a Data Processing Agreement — Quebec (Law 25 / CQLR c P-39.1)?

A Data Processing Agreement (Law 25 / CQLR c P-39 in Quebec.1) is a formal legal document used in Quebec for business operations, corporate governance, and commercial transactions. Create a Quebec Data Processing Agreement (Entente de traitement des renseignements personnels) under the Act respecting the protection of personal information in the private sector (CQLR c P-39.1, as amended by Law 25). Required when disclosing personal information to a service provider. Covers data processing scope, security measures, breach notification, sub-processors, and return/destruction of data. Download as PDF or Word. This document operates within Quebec's civil law (Civil Code of Quebec) framework and is designed to provide clear legal protection and certainty for all parties involved. These laws establish the legal requirements for valid agreements, the rights and obligations of the parties, and the remedies available in case of breach or dispute. Understanding the applicable legal framework is essential for drafting an effective Data Processing Agreement (Law 25 / CQLR c P-39.1) that will be enforceable under Quebec law. The importance of having a properly drafted Data Processing Agreement (Law 25 / CQLR c P-39.1) cannot be overstated. Without a clear, written agreement, parties risk misunderstandings, disputes, and potential legal liability. A well-drafted Data Processing Agreement (Law 25 / CQLR c P-39.1) sets out the terms and conditions that govern the relationship between the parties, including their respective rights, obligations, and the procedures for resolving any disagreements that may arise. It serves as the primary reference point should any questions or disputes occur during the course of the arrangement. In today's regulatory environment in Quebec, compliance with legal requirements is increasingly important. A Data Processing Agreement (Law 25 / CQLR c P-39.1) helps confirm that all parties are meeting their legal obligations and provides a clear record of the agreed terms for future reference. Using a standardized Data Processing Agreement (Law 25 / CQLR c P-39.1) template offers several practical advantages. It confirms that all essential clauses are included, reduces the time and cost of drafting from scratch, and provides a professional framework that can be customized to suit specific needs. Whether you are an individual, a small business owner, or a large corporation operating in Quebec, having access to a well-structured template confirms consistency and completeness in your legal documentation.

When Do You Need a Data Processing Agreement — Quebec (Law 25 / CQLR c P-39.1)?

A Data Processing Agreement (Law 25 / CQLR c P-39.1) is needed whenever parties in Quebec wish to formalize their arrangement regarding business operations, corporate governance, and commercial transactions. There are numerous situations in which this document becomes essential for protecting the interests of all involved parties. In a business context, you may need a Data Processing Agreement (Law 25 / CQLR c P-39.1) when entering into new commercial relationships, when formalizing existing arrangements that have previously been informal, when expanding your business operations, or when restructuring existing agreements. Companies registered with REQ should confirm proper documentation is maintained for all significant business transactions. You should also consider using a Data Processing Agreement (Law 25 / CQLR c P-39.1) when there has been a change in circumstances that affects an existing arrangement, when you need to comply with new regulatory requirements, when you wish to update outdated documentation, or when professional advisors recommend formalizing certain aspects of your affairs. In Quebec, maintaining current and accurate legal documentation is considered best practice and can help prevent costly disputes. It is generally advisable to prepare a Data Processing Agreement (Law 25 / CQLR c P-39.1) before any issues arise, rather than trying to document terms after a dispute has already begun. Proactive documentation provides clarity and reduces the potential for misunderstandings. If you are unsure whether you need this document for your specific situation in Quebec, consulting with a qualified legal professional can provide guidance tailored to your circumstances. The timing of executing a Data Processing Agreement (Law 25 / CQLR c P-39.1) is also important. In Quebec, certain documents must be executed before specific actions are taken or within prescribed time periods to be effective. Delaying the preparation of necessary legal documents can result in complications, lost rights, or additional costs. Therefore, it is recommended to prepare this document as early as possible once the need has been identified.

What to Include in Your Data Processing Agreement — Quebec (Law 25 / CQLR c P-39.1)

A well-drafted Data Processing Agreement (Law 25 / CQLR c P-39.1) for use in Quebec should contain several essential elements to confirm it is legally effective and provides adequate protection for all parties. Party Identification: The document should clearly identify all parties involved, including their full legal names, addresses, and relevant identification numbers. For individuals in Quebec, this may include identity card or passport numbers. For companies, registration numbers and registered addresses should be specified. Clear identification prevents disputes about who is bound by the agreement. Recitals and Background: The document should include background information explaining the context and purpose of the arrangement. This helps establish the parties' intentions and can be important in interpreting the terms of the document if any ambiguity arises later. The recitals section provides valuable context for the operative provisions that follow. Operative Terms: The core terms and conditions should be set out clearly and thoroughly. This includes the rights and obligations of each party, any conditions or prerequisites, the duration of the arrangement, and any limitations or restrictions. All key terms should be defined precisely to avoid ambiguity and potential disputes. Payment and Financial Terms: Where applicable, the document should specify any payments, fees, deposits, or other financial considerations. The amounts, currency (CAD), payment schedules, and methods of payment should be clearly stated. Any provisions for late payment, interest charges, or adjustments should also be included. Term and Termination: The document should specify its duration, including the start date, end date or conditions for expiry, and any provisions for renewal or extension. The circumstances under which either party may terminate the arrangement early should be clearly defined, along with any notice requirements and the consequences of termination. Dispute Resolution: The document should include provisions for resolving any disputes that may arise, such as negotiation, mediation, arbitration, or litigation. In Quebec, parties may choose to specify the jurisdiction of Quebec courts and the applicable law. Including a clear dispute resolution mechanism can save significant time and expense if disagreements occur. Governing Law and Jurisdiction: The document should specify that it is governed by the laws of Quebec and that disputes shall be subject to the jurisdiction of Quebec courts. This is particularly important in cross-border transactions or where parties are based in different jurisdictions. Signatures and Execution: The document must be properly signed by all parties or their authorised representatives. In Quebec, certain documents may need to be witnessed, notarised, or executed as deeds to be legally effective. The date of execution should be clearly recorded, and each party should retain an original signed copy for their records.

Cite this page

Reference this free template in an article, syllabus, or research note:

APA

Forms Legal. (2026). Data Processing Agreement — Quebec (Law 25 / CQLR c P-39.1) (Quebec) [Legal document template]. Forms Legal. https://forms-legal.com/quebec/business/contracts/data-processing-agreement-quebec

MLA

"Data Processing Agreement — Quebec (Law 25 / CQLR c P-39.1) (Quebec)." Forms Legal, 2026, https://forms-legal.com/quebec/business/contracts/data-processing-agreement-quebec.

BibTeX
@misc{formslegal-data-processing-agreement-quebec,
  author       = {{Forms Legal}},
  title        = {Data Processing Agreement — Quebec (Law 25 / CQLR c P-39.1) (Quebec)},
  year         = {2026},
  howpublished = {\url{https://forms-legal.com/quebec/business/contracts/data-processing-agreement-quebec}},
  note         = {Free legal document template. Based on Civil Code of Québec (CCQ), Book Five: Obligations}
}

Frequently Asked Questions

Based on Civil Code of Québec (CCQ), Book Five: Obligations — Template last modified June 2026

This template is provided for informational purposes only and does not constitute legal advice. Laws vary by jurisdiction and change over time. Consult a qualified attorney for advice specific to your situation.Full disclaimer

Found an error? Let us know

Related Documents

You may also find these documents useful:

Convention d'arbitrage — Québec (C.c.Q. arts. 2638-2643, C.p.c. arts. 620-655)

Créez une Convention d'arbitrage québécoise juridiquement contraignante pour régler les différends commerciaux hors tribunal. Régie par le C.c.Q. arts. 2638-2643 et le C.p.c. arts. 620-655. Supporte le compromis (différend existant) et la clause compromissoire (différends futurs). Couvre les règles d'arbitrage (CCAC/CCI/ICDR/ad hoc), le nombre d'arbitres, le siège, la langue, la confidentialité et les frais. La sentence est finale (art. 2643 C.c.Q.). PDF ou Word.

Accord de distribution exclusive (Québec)

Créez un accord de distribution exclusive complet au Québec couvrant le territoire exclusif, les engagements d'achats minimums, les prix, les obligations marketing, la non-concurrence, la propriété intellectuelle et la résiliation selon le droit civil québécois et la Loi sur la concurrence.

Accord-cadre fournisseur — Québec (C.c.Q. arts. 1708–2129)

Créez un Accord-cadre fournisseur québécois complet établissant les conditions générales pour l'approvisionnement continu en biens et/ou services. Régi par le C.c.Q. arts. 1708–1805 (vente), arts. 2098–2129 (contrat de service) et art. 1375 (bonne foi). Couvre tarification, livraison, paiement, qualité, garantie, limitation de responsabilité, durée et résiliation.

Accord de règlement à l'amiable — Québec

Accord de règlement à l'amiable (transaction) régi par les articles 2631 à 2637 du Code civil du Québec. Règle les différends par concessions mutuelles avec l'autorité de la chose jugée (art. 2633 CCQ). Comprend un paiement monétaire facultatif, une quittance mutuelle, la confidentialité, le non-dénigrement et la discontinuation des procédures.