FAQ-216 EN - Are there fines if I do not have a published Privacy Policy on my website?

Yes. The Commission d'accès à l'information of Quebec can impose significant financial penalties on businesses that do not comply with Law 25. Amounts vary based on the severity of the violation and the size of the organization. Beyond penalties, the absence of a Privacy Policy exposes you to dispute risks with clients or employees over data management.