Guide · 2026-10-23
Quebec's Law 25 and AI training data: a plain-English checklist
Short answer: Under Quebec's Law 25, de-identified information is still personal information, so licensing it to an AI developer outside Quebec calls for a privacy impact assessment and a written agreement protecting it. Only information that is irreversibly anonymized falls outside the law. Elsewhere in Canada, PIPEDA governs personal information that crosses borders.
Quebec treats de-identified data as personal information. Here's what that means for licensing records to a US AI buyer.
Last updated · Sources linked inline · Buyer figures observed Oct 16, 2026
If your firm has a Quebec office or Quebec clients, Law 25 changes the licensing checklist. Here are the points that matter most.
Is de-identified data still personal information under Law 25?
Under Quebec's private-sector privacy law as amended by Law 25, de-identified information (identity no longer direct, but still inferable) remains personal information. Only information that is irreversibly anonymized falls outside it.
What is needed before data leaves Quebec?
Communicating personal information outside Quebec calls for a privacy impact assessment and a written agreement that protects it. A licence to a US buyer is exactly that kind of communication.
Does PIPEDA also apply?
Elsewhere in Canada, PIPEDA governs personal information that crosses provincial or national borders. See the OPC's summary.
Do buyers want French-language records?
Most buyer programs say they want English-language records, so mainly French archives may fit fewer of them.
What's on the Law 25 checklist?
- Map which records involve Quebec residents
- Decide on anonymization or de-identification, and who does it
- Complete a privacy impact assessment
- Put protections in the written buyer agreement
- Record decisions with your privacy officer
Official guidance: Commission d'accès à l'information du Québec. More in our compliance hub.
General information, not legal advice. Buyer figures are as published on the dates shown; verify before relying on them.