AODA, PIPEDA and Law 25: a website compliance checklist

Short answer: Canadian websites should meet WCAG 2.2 AA accessibility (required by Ontario’s AODA for many organisations), obtain meaningful consent for personal data under PIPEDA and Quebec’s Law 25, follow CASL for commercial email, and offer French where Quebec law requires it.

This is general information, not legal advice. Check your obligations with a qualified professional.

Accessibility (AODA / WCAG 2.2 AA)

• Text alternatives for images and meaningful link text
• Sufficient colour contrast and resizable text
• Full keyboard navigation with visible focus
• Labelled forms and clear error messages
• Captions or transcripts for video and audio

Privacy (PIPEDA and Law 25)

• A clear privacy policy that names a person responsible for privacy
• Opt-in consent for non-essential cookies and analytics
• Collect only the data you need and say why
• A way to access, correct or delete personal information
• Safeguards and a plan for privacy incidents

Email and language (CASL, Bill 96)

• Get consent before sending commercial email or SMS, identify yourself and include an unsubscribe link
• Offer French content of equal prominence if you serve Quebec customers

How to check your site

Run an automated scan (such as Lighthouse or axe), then test by keyboard and with a screen reader, and review your forms, cookies and policies. Fix issues in priority order.

We build these requirements into every project. Book a free consultation for a compliance review of your site.

Related: Website development in Canada