Québec · Loi sur l'accès & Law 25

Access and privacy for Québec public bodies, in one platform

AccessPoint manages access requests under the Act respecting Access to documents (A-2.1) and the privacy obligations Law 25 now imposes — pre-configured for Québec, French-primary, and running inside your own Microsoft 365 tenant.

Start Free Trial Request a Demo

Québec at a glance

Response deadline
20 days from receipt (s. 47)
Extensions
One extension of up to 10 days (s. 47)
Fees
Consultation is free; regulated fees for transcription, reproduction, and transmission
Confidentiality-incident reporting
Mandatory to the CAI and affected individuals (Law 25, since 2022)
Oversight
Commission d'accès à l'information (oversight and binding adjudication)
Languages
French — the regime operates primarily in French

Built for Québec

One platform for the whole access-and-privacy mandate, pre-configured for this regime and running in your own Microsoft 365 tenant.

Access requests on the 20-day clock

Intake to release on Québec's statutory timeline under the Act respecting Access — the 20-day clock, the section 47 extension, the A-2.1 restrictions catalogue for redaction, fee handling, and CAI-ready records, all built on Microsoft 365.

Privacy impact assessments (EFVP)

Run the évaluation des facteurs relatifs à la vie privée that Law 25 requires before an information-system project and before communicating personal information outside Québec — a guided questionnaire, an embedded risk register, and a defensible record.

Confidentiality-incident reporting

Log a confidentiality incident, assess the risk of serious injury, and get a live checklist of what Law 25 requires you to report to the Commission d'accès à l'information and to affected individuals, and by when.

CAI oversight and adjudication

Track both oversight complaints and adjudicative disputes before the Commission d'accès à l'information with their own clocks, an investigation workspace, and a guided path from representations to a recorded decision.

French by default

Every interface element, notice, letter, and template operates in French, consistent with the Charter of the French language — with English available where a requester needs it.

In your own Québec tenant

Every request, assessment, and record stays inside your own Microsoft 365 and Azure tenant — no third-party cloud, no cross-border transfers, no per-user fees.

Québec's Law 25

Law 25 rebuilt Québec's privacy rules. AccessPoint runs them beside your access requests.

Adopted in 2021 and phased in from 2022 to 2024, Law 25 modernized the Act respecting Access. Public bodies must now report confidentiality incidents to the Commission d'accès à l'information and to affected individuals, complete a privacy impact assessment — an évaluation des facteurs relatifs à la vie privée — before information-system projects and before releasing personal information outside Québec, keep governance policies, and face administrative monetary penalties. Most offices already field access requests; Law 25 adds a privacy-governance program on top. AccessPoint runs both on one platform, French-primary, in your own tenant.

EFVP assessments Privacy impact assessments before projects and cross-border releases.
Incident reporting Confidentiality incidents reported to the CAI and affected individuals.
CAI enforcement Administrative monetary penalties and binding adjudication.

Configured out of the box

Installing the ca-qc-acces configuration pack seeds your tenant with everything this regime needs — a starting point you can adjust, not a lock-in.

Related guide: FOI Workflow Quick Check
  • The Act respecting Access (A-2.1) as the legal-authority and citation spine
  • Québec statutory-holiday calendar and the 20-day (plus 10-day) due-date rules
  • The A-2.1 restrictions catalogue, colour-coded for redaction
  • Section 47 extension handling with citations and limits
  • Regulated transcription, reproduction, and transmission fee categories
  • CAI oversight-complaint and adjudicative-dispute grounds and dispositions
  • Québec timeliness brackets and statistical-reporting templates
  • French-primary correspondence and confidentiality-incident templates

Québec Questions

Does AccessPoint support Québec's Law 25 obligations?
Yes. Alongside your A-2.1 access requests, AccessPoint runs the Law 25 privacy program — privacy impact assessments (EFVP), confidentiality-incident reporting to the Commission d'accès à l'information and affected individuals, and governance records — on the same platform, with a full audit trail.

Is the platform available in French?
Yes. AccessPoint is French-primary for Québec: every interface element, notice, letter, and template operates in French, consistent with the Charter of the French language, with English available where a requester needs it.

Does it handle CAI oversight and adjudication?
Yes. AccessPoint tracks both oversight complaints and adjudicative disputes before the Commission d'accès à l'information, each with its own clock, an investigation workspace, and a guided closure that records the disposition or decision.

Where does Québec data reside?
Entirely within your own Microsoft 365 and Azure tenant. Requests, documents, assessments, and audit history never leave your control — no third-party cloud and no cross-border data transfers.

Run Access and Law 25 in One Platform

Try AccessPoint free for 30 days, pre-configured for Québec and French-primary. No credit card required.

Start Free Trial