Quebec Law 25
Law 25 practices
Distronode Corporation • Last Updated: August 26, 2026
On this page
01. Overview
Quebec's Law 25 (formerly Bill 64) modernized the province's rules for handling personal information in the private sector. It adds duties around governance, transparency, consent, breach reporting, and individual rights. Like PIPEDA, there is no government certification that declares a product "Law 25 compliant," so this page describes what we actually do.
District AI handles personal information as a service provider on behalf of the businesses that use it. The sections below set out the concrete practices we maintain, and the one thing we do not yet offer.
02. What We Do
| Practice | What it means in practice |
|---|---|
| A named person in charge of privacy | Law 25 requires a designated person in charge of the protection of personal information. At Distronode Corporation that person is Sean Dean, our founder and CEO, reachable at legal@distronode.com. This person oversees our privacy practices, handles access and rectification requests, and is the point of contact for the Commission d'acces a l'information (CAI). |
| A confidentiality incident register | We keep a register of confidentiality incidents, as Law 25 requires. When an incident presents a risk of serious injury, we notify the CAI and the affected individuals promptly, and we record what happened and the measures taken to reduce the risk and prevent recurrence. |
| Clear consent and transparency | We ask for consent in clear language and for specific purposes, and we publish our practices across this compliance area rather than burying them. Businesses author their receptionist's greeting, and we recommend and support configuring it to identify the assistant as automated when it answers, so people know how their information is being collected before they continue. |
| Privacy by default | New workspaces start with privacy-protective settings. Lead enrichment and profiling features are opt-in rather than on by default, and tenant data is isolated at the database with row-level security so it cannot be read by another customer. |
| Assessments before we ship | We assess privacy factors before releasing features that involve new uses of personal information or transfers outside Quebec, consistent with Law 25's privacy impact assessment expectations. We rely on contractual safeguards with our sub-processors for information handled outside the province. |
| Access, rectification, and portability | Individuals can ask what personal information we hold, request a copy, ask us to correct it, and request portability of information they provided to us in a structured, commonly used technological format. Account holders can also export workspace data directly from the dashboard. |
03. French-Language Service
Where French-language service stands
We want to be straight about where this stands. For customer workspaces, District AI's receptionist, dashboard, and telephone support currently operate in English only: we do not yet offer French-language call handling in production, or a French interface. Written enquiries sent to us by email are answered in French. This website is available in French, and its live voice demo now speaks French: a preview of French-language service, not yet the production product.
If your business serves the public in Quebec, French-language service may be an expectation for your customers and a factor in your own obligations. We will note here when French-language service becomes available rather than implying it already is.
04. Contact
The person in charge of the protection of personal information at Distronode Corporation is Sean Dean. To make a request or raise a concern:
For Quebec personal information, you may also contact the Commission d'acces a l'information du Quebec.
- Related documents