Cybersecurity and Technology Law

Bill 25 is now in effect. Your company’s obligations regarding the protection of personal information are real—and the penalties are significant. Lanctot Avocats guides you toward compliance.

Cybersecurity and Information Technology Law

The legal obligations of digital companies are evolving rapidly. Bill 25, the Canadian Anti-Spam Act (CASL), and issues related to artificial intelligence are shaping a constantly changing Canadian legal framework.

Lanctot Avocats provides practical, actionable advice tailored to the unique needs of Quebec SMEs that want to comply with regulations, protect themselves, and innovate with confidence.

Data Protection and Compliance with Act 25

Bill 25 imposes specific obligations on all businesses that collect, use, or disclose personal information in Quebec. Our team can help you comply with these requirements.

  • Law 25 Compliance Audit — Current Status and Recommendations;
  • Privacy Policy — drafting and publication;
  • Appointment and support of the Privacy Officer;
  • Privacy Incident Log;
  • Procedures for responding to access requests;
  • Privacy Impact Assessment (PIA);
  • Notification to the Commission for Access to Information in the event of a serious incident.

Canada’s Anti-Spam Legislation (CASL)

The CAN-SPAM Act regulates the sending of commercial electronic messages in Canada and imposes strict requirements on any business that communicates with its customers or prospects via email, text message, or any other electronic means. Failure to comply exposes your business to significant administrative fines.

  • LCAP Compliance Audit — Review of Your Mailing Practices;
  • Obtaining and documenting consent from recipients;
  • Implementation of a compliant unsubscribe mechanism;
  • Drafting internal anti-spam policies;
  • Representation in the event of a complaint or CRTC investigation;
  • Guidance on exceptions and special cases provided for by law.

Technology Contracts and Artificial Intelligence

Technology contracts and issues related to AI require specialized legal expertise. We help you ensure the soundness of your relationships with your technology suppliers and partners.

  • Software development contracts and SaaS contracts;
  • Cloud computing and service level agreements (SLAs);
  • Artificial Intelligence — Risk Management and Allocation;
  • Terms of Use and Privacy Policies;
  • E-commerce — Legal Obligations of Platforms.

We also assist companies in the event of a cybersecurity incident—from crisis management to representing them before regulatory authorities.

Compliance with Act 25

LCAP Compliance

Artificial Intelligence

  • Transfer of personal data outside Quebec — rules and agreements;
  • Transfer of rights to software and digital content;
  • Appearance before the Commission d’accès à l’information (CAI);
  • Appearances before the CRTC — complaints and investigations under the CAEA;
  • Training and raising awareness among staff regarding legal obligations;
  • Crisis management — cybersecurity incident;
  • Claims and disputes related to data breaches.