Privacy Notice for Employees (Quebec)
Province de Québec — Loi 25 (RLRQ c P-39.1) · C.c.Q. arts. 35–41
**AVIS DE CONFIDENTIALITÉ — RENSEIGNEMENTS PERSONNELS DES EMPLOYÉS**
[Nom Employeur]
En vigueur à compter du : [Date Effet]
1. INTRODUCTION ET CADRE LÉGAL
Le présent Avis de confidentialité décrit la façon dont [Nom Employeur] (ci-après l'« Employeur »), situé au [Adresse Employeur], collecte, utilise, conserve, protège et divulgue les renseignements personnels de ses employés, conformément à la Loi sur la protection des renseignements personnels dans le secteur privé (RLRQ c P-39.1), telle que modifiée par la Loi modernisant des dispositions législatives en matière de protection des renseignements personnels (Loi 25), aux articles 35 à 41 du Code civil du Québec (C.c.Q.), et à l'article 5 de la Charte des droits et libertés de la personne (RLRQ c C-12).
2. RESPONSABLE DE LA PROTECTION DES RENSEIGNEMENTS PERSONNELS
Conformément à la Loi 25, [Nom Employeur] a désigné la personne suivante comme responsable de la protection des renseignements personnels :
**[Nom Responsable]** — [Courriel Responsable]
Toute demande d'accès, de rectification ou toute préoccupation relative à la confidentialité doit être adressée à cette personne.
3. CATÉGORIES DE RENSEIGNEMENTS COLLECTÉS
[Nom Employeur] collecte les catégories de renseignements personnels suivantes auprès de ses employés : [Categories R P]. Conformément au principe de minimisation, seuls les renseignements nécessaires aux fins déclarées sont collectés.
4. FINALITÉS DE LA COLLECTE ET DE L'UTILISATION
Les renseignements personnels des employés sont collectés et utilisés aux fins suivantes : [Finalites Collecte]. Tout renseignement ne sera utilisé qu'à des fins compatibles avec celles pour lesquelles il a été collecté.
5. DIVULGATION À DES TIERS
[Nom Employeur] peut divulguer des renseignements personnels des employés aux destinataires suivants : [Tiers Destinataires]. Tout prestataire de services tiers est lié par un accord de confidentialité conforme aux exigences de la Loi 25.
6. CONSERVATION ET DESTRUCTION
Les renseignements personnels des employés sont conservés selon les durées suivantes : [Periode Conservation]. À l'expiration de la durée de conservation, les renseignements sont détruits de façon sécurisée ou anonymisés.
7. DROITS DES EMPLOYÉS
Conformément à la Loi 25 et aux articles 27 et 28 de la Loi sur la protection des renseignements personnels dans le secteur privé, tout employé a le droit : (a) d'accéder à ses renseignements personnels et d'en obtenir une copie; (b) de demander la rectification de renseignements inexacts ou incomplets; (c) de demander la portabilité de ses renseignements dans un format technologique structuré; (d) de déposer une plainte auprès de la Commission d'accès à l'information (CAI) si ses droits ne sont pas respectés. Les demandes doivent être adressées à [Nom Responsable] à [Courriel Responsable]. Un délai de 30 jours s'applique pour répondre aux demandes d'accès.
Employeur
________________
Signature
Employé — Accusé de réception
________________
Signature
What Is a Privacy Notice for Employees (Quebec)?
A Privacy Notice for Employees is a formal legal document used in Quebec for business operations, corporate governance, and commercial transactions. Create a Quebec Employee Privacy Notice compliant with the Act Respecting the Protection of Personal Information in the Private Sector (CQLR c P-39.1) as substantially amended by Law 25, the Civil Code of Québec (arts. 35–41 CCQ), and the Quebec Charter of Human Rights and Freedoms (art. 5). Covers categories of employee personal information collected, purposes, retention, disclosure to third parties, employee rights of access and rectification, and the Privacy Officer contact details required by Law 25. This document operates within Quebec's civil law (Civil Code of Quebec) framework and is designed to provide clear legal protection and certainty for all parties involved. In Quebec, this type of document is governed by several key pieces of legislation, including Civil Code of Quebec (CCQ), Act respecting labour standards (LNT), Act respecting the protection of personal information in the private sector (Law 25/LPRPSP), and Charter of Human Rights and Freedoms. These laws establish the legal requirements for valid agreements, the rights and obligations of the parties, and the remedies available in case of breach or dispute. Understanding the applicable legal framework is essential for drafting an effective Privacy Notice for Employees that will be enforceable under Quebec law. The importance of having a properly drafted Privacy Notice for Employees cannot be overstated. Without a clear, written agreement, parties risk misunderstandings, disputes, and potential legal liability. A well-drafted Privacy Notice for Employees sets out the terms and conditions that govern the relationship between the parties, including their respective rights, obligations, and the procedures for resolving any disagreements that may arise. It serves as the primary reference point should any questions or disputes occur during the course of the arrangement. In today's regulatory environment in Quebec, compliance with legal requirements is increasingly important. Government bodies such as REQ, CNESST, TAL may require certain documentation to be in place, and failure to comply with applicable regulations can result in penalties, fines, or other adverse consequences. A Privacy Notice for Employees helps confirm that all parties are meeting their legal obligations and provides a clear record of the agreed terms for future reference. Using a standardized Privacy Notice for Employees template offers several practical advantages. It confirms that all essential clauses are included, reduces the time and cost of drafting from scratch, and provides a professional framework that can be customized to suit specific needs. Whether you are an individual, a small business owner, or a large corporation operating in Quebec, having access to a well-structured template confirms consistency and completeness in your legal documentation. Under Quebec law, Section 4 of the Business Corporations Act (CQLR c S-31.1) and Article 35 of the Code of Civil Procedure (CQLR c C-25.01) govern the core requirements for this type of document.
When Do You Need a Privacy Notice for Employees (Quebec)?
A Privacy Notice for Employees is needed whenever parties in Quebec wish to formalize their arrangement regarding business operations, corporate governance, and commercial transactions. There are numerous situations in which this document becomes essential for protecting the interests of all involved parties. In a business context, you may need a Privacy Notice for Employees when entering into new commercial relationships, when formalizing existing arrangements that have previously been informal, when expanding your business operations, or when restructuring existing agreements. Companies registered with REQ should confirm proper documentation is maintained for all significant business transactions. You should also consider using a Privacy Notice for Employees when there has been a change in circumstances that affects an existing arrangement, when you need to comply with new regulatory requirements, when you wish to update outdated documentation, or when professional advisors recommend formalizing certain aspects of your affairs. In Quebec, maintaining current and accurate legal documentation is considered best practice and can help prevent costly disputes. It is generally advisable to prepare a Privacy Notice for Employees before any issues arise, rather than trying to document terms after a dispute has already begun. Proactive documentation provides clarity and reduces the potential for misunderstandings. If you are unsure whether you need this document for your specific situation in Quebec, consulting with a qualified legal professional can provide guidance tailored to your circumstances. The timing of executing a Privacy Notice for Employees is also important. In Quebec, certain documents must be executed before specific actions are taken or within prescribed time periods to be effective. Delaying the preparation of necessary legal documents can result in complications, lost rights, or additional costs. Therefore, it is recommended to prepare this document as early as possible once the need has been identified. Under Quebec law, Section 4 of the Business Corporations Act (CQLR c S-31.1) and Article 1385 of the Civil Code of Québec (CCQ) govern the core requirements for this type of document.
What to Include in Your Privacy Notice for Employees (Quebec)
A well-drafted Privacy Notice for Employees for use in Quebec should contain several essential elements to confirm it is legally effective and provides adequate protection for all parties. Party Identification: The document should clearly identify all parties involved, including their full legal names, addresses, and relevant identification numbers. For individuals in Quebec, this may include identity card or passport numbers. For companies, registration numbers and registered addresses should be specified. Clear identification prevents disputes about who is bound by the agreement. Recitals and Background: The document should include background information explaining the context and purpose of the arrangement. This helps establish the parties' intentions and can be important in interpreting the terms of the document if any ambiguity arises later. The recitals section provides valuable context for the operative provisions that follow. Operative Terms: The core terms and conditions should be set out clearly and thoroughly. This includes the rights and obligations of each party, any conditions or prerequisites, the duration of the arrangement, and any limitations or restrictions. All key terms should be defined precisely to avoid ambiguity and potential disputes. Payment and Financial Terms: Where applicable, the document should specify any payments, fees, deposits, or other financial considerations. The amounts, currency (CAD), payment schedules, and methods of payment should be clearly stated. Any provisions for late payment, interest charges, or adjustments should also be included. Term and Termination: The document should specify its duration, including the start date, end date or conditions for expiry, and any provisions for renewal or extension. The circumstances under which either party may terminate the arrangement early should be clearly defined, along with any notice requirements and the consequences of termination. Dispute Resolution: The document should include provisions for resolving any disputes that may arise, such as negotiation, mediation, arbitration, or litigation. In Quebec, parties may choose to specify the jurisdiction of Quebec courts and the applicable law. Including a clear dispute resolution mechanism can save significant time and expense if disagreements occur. Governing Law and Jurisdiction: The document should specify that it is governed by the laws of Quebec and that disputes shall be subject to the jurisdiction of Quebec courts. This is particularly important in cross-border transactions or where parties are based in different jurisdictions. Signatures and Execution: The document must be properly signed by all parties or their authorised representatives. In Quebec, certain documents may need to be witnessed, notarised, or executed as deeds to be legally effective. The date of execution should be clearly recorded, and each party should retain an original signed copy for their records. Under Quebec law, Section 4 of the Business Corporations Act (CQLR c S-31.1) and Article 35 of the Code of Civil Procedure (CQLR c C-25.01) govern the core requirements for this type of document. Under Quebec law, Article 1385 of the Civil Code of Québec (CCQ) and Section 79.1 of the Act Respecting Labour Standards (CQLR c N-1.1) govern the core requirements for this type of document.
Under Quebec law, the Civil Code of Quebec (CCQ) governs contractual obligations and property rights. The Act Respecting Labour Standards (CQLR c N-1.1) and the Commission des normes, de l'equite, de la sante et de la securite du travail (CNESST) regulate employment. The Consumer Protection Act (CQLR c P-40.1) and the Office de la protection du consommateur (OPC) protect consumer rights. The Act Respecting the Protection of Personal Information in the Private Sector governs data privacy through the Commission d'acces a l'information (CAI). Revenu Quebec administers provincial tax obligations. The forms-legal.com Privacy Notice for Employees (Quebec) template covers the mandatory elements under Civil Code of Québec (CCQ), Book Five: Obligations.
Cite this page
Reference this free template in an article, syllabus, or research note:
Forms Legal. (2026). Privacy Notice for Employees (Quebec) (Quebec) [Legal document template]. Forms Legal. https://forms-legal.com/quebec/business/policies/privacy-notice-employees-quebec
"Privacy Notice for Employees (Quebec) (Quebec)." Forms Legal, 2026, https://forms-legal.com/quebec/business/policies/privacy-notice-employees-quebec.
@misc{formslegal-privacy-notice-employees-quebec,
author = {{Forms Legal}},
title = {Privacy Notice for Employees (Quebec) (Quebec)},
year = {2026},
howpublished = {\url{https://forms-legal.com/quebec/business/policies/privacy-notice-employees-quebec}},
note = {Free legal document template. Based on Civil Code of Québec (CCQ), Book Five: Obligations}
}Frequently Asked Questions
Under the Act Respecting the Protection of Personal Information in the Private Sector (CQLR c P-39.1) as amended by Law 25, Quebec employers may only collect personal information from employees that is necessary for the purposes of managing the employment relationship. The principle of data minimization (nécessité) is central — employers cannot collect information beyond what is needed. Categories of employee personal information that are generally legitimate include: identification information (name, SIN, address, date of birth), employment-related information (position, salary, performance records, disciplinary records), payroll and benefits information (banking details, benefits enrollment), emergency contacts, medical information limited to what is necessary for accommodation or benefits administration, and training and qualification records. Sensitive personal information — defined in Law 25 as including health and biometric information — requires explicit consent and heightened security measures. Employers cannot request information relating to protected grounds under the Quebec Charter (criminal record with pardon, religion, political views, etc.) unless directly relevant to a bona fide occupational requirement. Collection of employee biometric data (fingerprints, facial recognition for attendance) requires a privacy impact assessment and notification to the Commission d'accès à l'information (CAI) prior to implementation.
Under Quebec's Law 25 and the underlying Act Respecting the Protection of Personal Information in the Private Sector (CQLR c P-39.1), employees have several important rights. The right of access (art. 27): employees may request access to all personal information held about them by the employer and receive a copy within 30 days of request, in a commonly used technological format. The right to rectification (art. 28): employees may request that inaccurate, incomplete, or ambiguous personal information be corrected or updated. The right to de-indexation (art. 28.1): employees may, in certain circumstances, request the de-indexation of hyperlinks providing access to their personal information if its disclosure causes them serious injury. The right to portability (art. 27.1): employees may request that their personal information be communicated to a third party (such as a new employer) in a structured, commonly used technological format where technically feasible. The right to withdraw consent: where the employer relies on consent as the legal basis for processing, employees may withdraw consent at any time, subject to legal consequences for the employment relationship. The right to complain: employees may file a complaint with the Commission d'accès à l'information (CAI) if they believe the employer has violated their privacy rights. Response deadlines and dispute resolution procedures must be set out in the employer's privacy policy.
A Quebec employer may disclose employee personal information to third parties only in defined circumstances under the Act Respecting the Protection of Personal Information in the Private Sector (CQLR c P-39.1, Law 25). Disclosure requires: (1) the employee's consent — generally required for disclosures to third parties unrelated to the employment relationship; (2) statutory authority — legal requirements to disclose (e.g., tax authorities, CNESST, courts by court order); (3) legitimate service providers — disclosure to third-party service providers (payroll processors, benefits administrators, cloud service providers) is permitted without consent where the service provider is bound by a written agreement requiring them to provide the same level of protection as the employer and to use the information only for the contracted service; (4) business transfers — disclosure in the context of a business acquisition or merger, subject to strict conditions including prior notification and entering into a confidentiality agreement. For disclosures outside Quebec (to other provinces or countries), Law 25 requires a privacy impact assessment to confirm that the receiving jurisdiction provides an adequate level of protection, or adequate contractual safeguards. Transfers to U.S. service providers are particularly scrutinized given differences between Quebec privacy law and U.S. data practices. The employer must document all third-party disclosures and be able to demonstrate compliance.
Non-compliance with Quebec's Act Respecting the Protection of Personal Information in the Private Sector (CQLR c P-39.1) as amended by Law 25 exposes employers to significant consequences. Administrative penalties: the Commission d'accès à l'information (CAI) may impose administrative monetary penalties of up to $10 million CAD or 2% of the enterprise's worldwide turnover, whichever is greater, for less serious violations. Penal (criminal-type) fines: for more serious violations — such as using personal information contrary to the stated purpose, failing to report a privacy incident, or preventing access to personal information — the Act provides for fines of up to $25 million CAD or 4% of worldwide turnover. Individual civil liability: under art. 35 CCQ and art. 49 of the Quebec Charter, an employee whose privacy rights are violated may sue the employer for compensatory damages and exemplary (punitive) damages. Reputational and regulatory consequences: the CAI has the power to order corrective measures, require the destruction of unlawfully collected information, and publish its decisions, exposing employers to reputational harm. Privacy incident reporting: employers must report to the CAI and notify affected individuals of any privacy incident involving a risk of serious harm — failure to report is itself a penal offence. Employers should conduct regular privacy audits and maintain a documented privacy governance framework to demonstrate accountability.
A Privacy Notice for Employees (Quebec) does not legally require a lawyer in Quebec, and individuals and businesses may draft and execute the document independently. The Civil Code of Québec (CCQ), Book Five: Obligations does not mandate legal representation for the creation or signing of this type of document. However, seeking independent legal advice from a qualified Quebec lawyer is recommended for transactions involving substantial financial value, complex regulatory requirements, or cross-border elements where multiple legal jurisdictions may apply. A lawyer can verify that the document complies with all applicable statutory requirements, identify potential risks specific to the transaction, and confirm that the terms adequately protect the interests of all parties involved. The Superior Court of Québec has jurisdiction over disputes arising from this type of document, and Registraire des entreprises du Québec may impose additional compliance obligations depending on the nature of the underlying transaction. Professional legal review is particularly advisable where the document will be submitted to government agencies or used as evidence in legal proceedings.
This template is provided for informational purposes only and does not constitute legal advice. Laws vary by jurisdiction and change over time. Consult a qualified attorney for advice specific to your situation.Full disclaimer
Found an error? Let us knowRelated Documents
You may also find these documents useful:
Politique d'utilisation acceptable (Québec)
Créez une Politique d'utilisation acceptable (PUA) pour les systèmes informatiques, réseaux et actifs numériques régie par le droit civil québécois. Couvre l'utilisation des ressources TI, l'accès Internet, le courriel, les médias sociaux et les obligations de traitement des données en vertu de la Loi 25, de la LNT et du C.c.Q. Essentielle pour protéger l'organisation contre la responsabilité et respecter les obligations québécoises en matière de protection de la vie privée.
Politique anti-discrimination et harcèlement (Québec)
Créez une politique québécoise anti-discrimination et anti-harcèlement conforme à la Charte des droits et libertés de la personne (CQLR c C-12), aux dispositions sur le harcèlement psychologique de la LNT (CQLR c N-1.1) et au C.c.Q. Couvre les 17 motifs prohibés, le harcèlement psychologique, les obligations d'enquête de l'employeur, les procédures de plainte et les recours via le CNESST.
Rapport d'incident de travail CNESST (Québec — LSST)
Créez un rapport d'incident et d'accident de travail CNESST conforme à la LSST (CQLR c S-2.1), à la LATMP (CQLR c A-3.001) et aux exigences de déclaration de la CNESST. Documente les accidents du travail, les incidents évités de justesse et les maladies professionnelles. Couvre les obligations de l'employeur, la notification dans les 6 heures pour les blessures graves et le droit au retour au travail.
Code de conduite et d'éthique (Québec)
Rédigez un Code de conduite et d'éthique des affaires québécois régi par le C.c.Q., la Charte des droits et libertés de la personne (CQLR c C-12), la LNT et la Loi 25. Couvre les attentes en matière de conduite professionnelle, les conflits d'intérêts, la confidentialité, l'anti-corruption, les médias sociaux, la discipline et la conformité aux normes d'éthique des affaires du Québec.