# Privacy · Blog

> Privacy programs, policies and data subject requests under Law 25 and GDPR, with practical steps for SMBs.

- URL: https://nextit.tech/blog/category/privacy/
- Language: English
- Other language: https://nextit.tech/fr/blogue/categorie/confidentialite/
- Publisher: NextIT (https://nextit.tech/)

---

# Privacy

Privacy programs, policies and data subject requests under Law 25 and GDPR, with practical steps for SMBs.

[Featured · Compliance ## GDPR for Canadian SMBs: when it applies and what it asks The EU privacy law can reach a Canadian business that sells to people in the EU or tracks them. Learn when it applies, what it asks for and where to start. NextIT Privacy Team Oct 27, 2026](https://nextit.tech/blog/gdpr-for-canadian-smbs-when-it-applies-and-what-it-asks/)

[Compliance ### Law 25 explained: what Québec’s privacy law asks of SMBs What Law 25 is, who it applies to, the duties it sets for a small business, the dates they started and the penalties behind them, explained in plain words. NextIT Privacy Team Oct 27, 2026](https://nextit.tech/blog/law-25-explained-what-quebecs-privacy-law-asks-of-smbs/) [Privacy ### Data subject requests under Law 25: how to answer within 30 days The five rights people can use under Law 25, the 30-day deadline, and a step-by-step way to answer each request in writing. NextIT Privacy Team Oct 15, 2026](https://nextit.tech/blog/data-subject-requests-under-law-25/)