Law 25 · Privacy impact assessment (PIA)
Your project’s privacy impact assessment, drafted from your answers
You describe the project. The tool asks the questions a consultant would ask, applies the law to your answers and produces a document structured on the Commission d’accès à l’information template, in Word and PDF.
CAD 499 per project, plus taxes
How it works
01
Describe the project
In your own words, as you would to a colleague.
02
Answer the follow-up questions
Five at most, on what your description leaves open.
03
Check your answers
The tool lays them out in structured form. You correct what needs correcting before anything is assessed.
04
Download and adopt
You review the document, edit it as needed and have your person in charge adopt it.
CAD 499 per project, plus taxes
A document you can show
Each assessment opens on its key figures, then shows where the information goes, what the law requires at each finding and where the risks sit.
When the law requires an assessment
Two sections of the Act respecting the protection of personal information in the private sector require it.
Section 3.3: any project to acquire, develop or overhaul an information system or electronic service delivery system that involves personal information.
Section 17: any communication of personal information outside Québec, including when a vendor processes it on your behalf.
Typical projects
- Adopting an artificial intelligence tool, such as a medical scribe or a chatbot
- Changing your management software, CRM or electronic record
- Handing information to a vendor that hosts it outside Québec
- Overhauling a website or app that collects information
What you get
- A seven-section document that follows the Commission d’accès à l’information’s generic template
- Findings that cite the section at stake and restate your answer
- A risk table, with severity and likelihood
- The four section 17 factors for each vendor outside Québec
- The measures that follow from your project
- An adoption block for your person in charge of the protection of personal information
- The document in Word, to edit, and in PDF
For private organisations in the health sector, the assessment adds the obligations of the Act respecting health and social services information.
What the tool does not do
- It does not replace legal advice, and the document says so.
- It never declares your organisation compliant. It states what each section requires and what you answered.
- It does not decide for you whether a communication outside Québec may go ahead. That conclusion belongs to your organisation.
What happens to your answers
- Your file is kept in Montréal, in a database hosted in Canada, and the site’s processing runs in Montréal.
- To write the follow-up questions and the descriptive sections, a language model (Claude, by Anthropic) processes your project description in the United States. It never receives your organisation’s name, your person in charge’s name, or any contact detail.
- The file is deleted 90 days after purchase, or as soon as you ask. You can download your answers as JSON at any time.
Frequently asked questions
- Who signs the document?
- Your organisation adopts it under the responsibility of its person in charge of the protection of personal information. That person, or whoever they delegated the function to, signs the adoption block.
- Do we file the assessment with the Commission?
- No. The law requires carrying it out, not filing it. Keep it in the project file, to show if the Commission asks for it.
- What about public bodies?
- The tool covers the private sector. Public bodies fall under another act, which this version does not handle.
- How long does it take?
- Allow time to describe the project and answer the questions. The drafting itself takes under a minute.
- What if I change my mind?
- As long as the document has not been produced, write to contact@peich.xyz and we refund you in full. Once it is produced, we refund only if the tool failed to produce a usable document.
One assessment per project, CAD 499
One project, one private file, one document in your name.