Law 27: is your workplace ready?
Quebec’s Law 27 makes every employer prevent workplace risks, including psychosocial risks such as harassment, overload and lack of support, and prove it with a prevention program or an action plan. Our conformity checkup tells you what applies to you, what you are missing and what to fix first.
Early access: we are opening the checkup to a first group of employers at a reduced early-access price. Request early access.
How the law works.
What Law 27 changed
- Law 27 is the Act to modernize the occupational health and safety regime (S.Q. 2021, c. 27), adopted from Bill 59 and assented on October 6, 2021. It amends Quebec’s Act respecting occupational health and safety.
- Prevention now applies to every employer, in every sector, whatever its size.
- Psychosocial risks count as workplace risks. They must be identified and included in your prevention documents, alongside physical risks.
- The regulation on prevention and participation mechanisms took effect on October 1, 2025. Employers already operating had until October 1, 2026 to have their program or plan developed and implemented. That date has passed: an inspector can now ask to see it.
What applies to you
- Fewer than 20 workers in an establishmentA prevention action plan, updated every year, and a health and safety liaison officer. Psychosocial risks must be identified.
- 20 workers or moreA prevention program, a joint health and safety committee and a health and safety representative. Psychosocial risks must be identified and analyzed.
- TrainingCommittee members and representatives need recognized training, with deadlines phased in to April 1, 2028.
- Who checksThe CNESST inspects and can issue fines. For a company they start around $2,100 per offence and exceed $84,000 when a worker’s health or safety is seriously compromised (2026 amounts, indexed yearly).
How the checkup works.
- 01
Scope
Your establishments, worker counts and sector, and which mechanisms apply to each one.
- 02
Review
Your program or action plan, risk identification (psychosocial risks included), harassment policy, committee or liaison officer, training records and follow-up.
- 03
Report
A clear gap report against Law 27 and the regulation, with each gap ranked by risk and effort.
- 04
Plan
A prioritized action plan and the checklist of evidence an inspector expects to see. Optional follow-up check after you fix the gaps.
What you get
- Gap report by establishment
- Prioritized action plan with owners and dates
- Inspection-ready evidence checklist
- Same approach as our Law 25 readiness assessment: plain language, practical, no surprises
The checkup reviews your documents and processes. It does not replace your occupational health and safety advisor or legal counsel.
Request early access.
Tell us about your organization. Early-access employers get the checkup at a reduced price and help us shape it. We reply within two business days, in your language. If you have had a CNESST visit or notice, say so and we will call you first.
Where it connects.
Frameworks
- To be mapped
Delivered by
- To be mapped
Industries
- To be mapped
Commonly bundled with
- To be mapped
Related insights
Securing AI use: the Cyber Centre’s 10 AI security measures
The Canadian Centre for Cyber Security's new primer sets out 10 AI security measures in three pillars. What each one asks for, and how…
Read the insight →ISO/IEC 27701:2025: privacy certification no longer needs ISO 27001
The 2025 edition of ISO/IEC 27701 is a standalone privacy management system standard. Who benefits, how it maps to Quebec's Law 25, and what…
Read the insight →The EU Cyber Resilience Act: what Canadian exporters must report since 2026-09-11
Selling connected hardware or software into the EU? The Cyber Resilience Act's 24-hour vulnerability reporting duty applies since 2026-09-11, and the main obligations follow…
Read the insight →