Data Consent Form — Quebec (Formulaire de consentement aux données / Loi 25)

A Data Consent Form — Quebec (Formulaire de consentement aux données / Loi 25) in Quebec a Quebec Data Consent Form (Formulaire de consentement) is a document by which an individual provides explicit, informed, and manifest consent for an organization to collect, use, or disclose their personal information for specific purposes. Required by Law 25 (LPRPSP), it must clearly describe what information is collected, why, and how it will be used. Under Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25, CQLR c P-39.1), organizations must obtain free, informed, and specific consent before collecting personal information. The Commission d'acces a l'information (CAI) enforces compliance and may impose administrative monetary penalties up to $25,000,000 or 4% of worldwide turnover under Section 90.1 of Law 25. The Civil Code of Quebec (CCQ) Articles 35-37 establish the fundamental right to privacy. The Charter of Human Rights and Freedoms of Quebec (CQLR c C-12), Section 5, also protects personal information. Organizations subject to Law 25 must appoint a privacy officer and publish a privacy policy accessible to data subjects. The Superior Court of Quebec and the Court of Quebec adjudicate disputes arising from privacy violations. Article 37 of the Civil Code of Quebec (CCQ) grants individuals the right to access and correct personal information about themselves held by any person.

A data consent form is needed when collecting personal information for marketing, research, cross-border transfers, or any secondary use beyond the primary purpose for which data was originally collected. Law 25 requires specific consent for each distinct purpose.

Parties in Quebec should prepare a Data Consent Form — Quebec (Formulaire de consentement aux données / Loi 25) proactively rather than waiting for a dispute to arise. Courts interpret agreements based on the written terms rather than oral representations. Where the transaction involves regulated activities, prior approval from the relevant authority may be required before execution. Organizations should obtain written consent before any data collection to comply with Law 25 and CCQ arts. 35-37. The Act Respecting Access to Documents Held by Public Bodies and the Protection of Personal Information (CQLR c A-2.1) imposes parallel requirements for public bodies. Revenu Quebec may also require documented consent for tax-related data sharing under the Tax Administration Act (CQLR c A-6.002). The CAI may audit organizations at any time, making prior written consent records essential.

Key elements: organization name, types of personal information collected, specific purpose(s), third parties to whom it will be disclosed, cross-border transfer disclosure, retention period, individual's rights (access, correction, withdrawal), contact for Privacy Officer, withdrawal procedure, and signature with date.

Additional compliance elements for a Data Consent Form — Quebec (Formulaire de consentement aux données / Loi 25) used in Quebec include: Required elements include: identity and contact of the organization collecting data; specific purpose of collection; categories of personal data collected; third parties with whom data may be shared; data retention period; rights of the data subject (access, rectification, withdrawal of consent) under Law 25 s. 37; mechanism for withdrawing consent; date and signature of the consenting party. Under Article 8 of Law 25, consent must be manifest, free, informed, and given for specific purposes. The CAI may require production of consent records during an investigation. Forms-legal.com provides this Quebec-compliant data consent form template as a starting point. Article 37 of the Civil Code of Quebec (CCQ) also grants data subjects the right to access and correct their personal information. Consent records must be retained for at least 3 years under Law 25 practice guidelines. The Superior Court of Quebec adjudicates civil claims for breach of privacy. Consult a Quebec privacy lawyer for complex data sharing arrangements. The CAI may require organizations to produce consent records during an investigation under Law 25. Under Section 90.1 of Law 25, administrative penalties reach $25,000,000 for the most serious violations. The Superior Court of Quebec adjudicates civil privacy claims under CCQ art. 1457. All consent forms should specify the retention period and the procedure for revoking consent. Under CCQ art. 35, every person has a right to the respect of their reputation and privacy.