Dialog Insight Privacy and Compliance Tools

In 2021, Quebec passed Law 25, a major overhaul of its personal information protection rules. Its requirements came into force in phases over the following years, with significant penalties for organizations that didn’t comply. Since Dialog Insight’s customers used the platform to store and act on their contacts’ personal data, they needed the platform itself to support compliance, and that support had to be ready before the law took effect.

I was tasked with analyzing the law and defining the product changes needed to make compliance simple for our users. I worked through the legal text in detail and met with customers’ compliance teams to understand how they interpreted the requirements and where they expected the platform to help.

From that analysis, I identified and delivered three areas of work:
- Privacy officer designation. Law 25 requires organizations to designate a person in charge of protecting personal information, often called a DPO. We built a simple interface for users to designate that person, who would then be contacted in case of a security incident. Their contact information was also made easy for email recipients to find if they had concerns about their data.
- Data retention and destruction. Users had no reliable way to destroy personal data once it was no longer needed, which the law now required. We built tools to let users define precisely what counted as expired data, and automated the cleanup based on those rules.
- Tracking consent. Similar to the changes websites made for cookie tracking, we reworked how Dialog Insight’s tracking was presented so that recipients could give clear, informed consent.

Result: all three areas shipped before the law’s requirements came into force, so our customers had the tools they needed to comply from day one.

This project taught me how to turn legal text into concrete product requirements, and how to work in a space where the rules are still being interpreted. The goal is always the same: make the compliant path the easiest one for the user.