Your compliance with
Phase 1 and 2 of Law 25,

accompanied by
our expertise

Comply with Law 25 with ease thanks to our Microsoft 365 turnkey toolbox and cybersecurity support.

Ease of compliance

With our turnkey toolkit, you can easily comply with the compliance requirements of Law 25.

Automating your compliance

Thanks to the various document management tools in our toolbox, you can automate tasks related to your compliance.

Cybersecurity expertise

Our consultation hours with a cybersecurity specialist allow you to receive advice to protect your valuable data.

Phase 1

The turnkey toolkit integrated with Microsoft 365 Phase 1 includes the following elements:
  • Reference library with templates
    • Procedure for managing privacy incidents involving personal information
    • Procedure for managing cybersecurity incidents
    • Notice template to inform in writing any person affected by a privacy incident
    • Notice template to the Commission d’accès à l’information (CAI)
    • Analysis grid to determine whether the incident presents a risk of serious harm
    • Delegation template of the manager and his legal obligations
  • Forms to submit privacy-security incidents
  • Privacy-security incident register
  • Training videos on the confidentiality of personal information
  • Overview of the toolbox for the purpose of training the manager at the client
  • 5 hours of support by a cybersecurity specialist

Phase 2

The turnkey toolkit integrated with Microsoft 365 Phase 2 includes the following elements:
  • Reference library with legal templates
    • Privacy program​
    • Privacy framework policy​
    • Directive on the collection, use and communication of personal information​
    • Directive on the retention and destruction of personal information​
    • Procedure for managing requests and complaints relating to personal information​
    • Directive on physical, technical and organizational security measures for personal information​
    • Privacy policy for the website​
    • Contractual annex to be attached to a service contract to provide for the protection of personal information​
    • Data processing agreement as a model agreement for the processing of personal information by a supplier​
    • Privacy Impact Assessment Guide​
    • Privacy Impact Assessment Report Template
  • Personal Information (PI) Registry
  • Register of Information Assets Containing PI
Support to conduct the PI inventory and complete the registry (Number of hours varies according to your needs).

We offer you this kit
in collaboration with our partner