Skip to main content
Glama

movahedi.ca Privacy Data

Get Law 25 compliance requirements

privacy_law25_requirements
Read-onlyIdempotent

Get the Quebec Law 25 compliance checklist: the concrete requirements organizations must meet, covering the privacy officer, purposes, consent, individual rights, retention, cross-border transfers, breach notification, minors' data, automated decisions, and complaint paths. Use this when someone asks what Law 25 requires, how to comply with Law 25, or for a gap-assessment checklist. Optionally filter to one category like 'Consent' or 'Incident response'.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
categoryNoOnly requirements in this category. Omit for the full checklist.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
categoriesYesAll available categories for the 'category' filter.
total_countYesNumber of requirements returned.
requirementsYesLaw 25 requirements.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior, so the bar is lower. The description adds behavioral context about the checklist's scope and optional category filtering. It does not contradict any annotation, and the output schema covers the return shape.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose, then provides content scope, usage context, and filtering behavior in a compact set of sentences. Every sentence earns its place without fluff or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given a single optional parameter, complete schema documentation, an output schema, and rich annotations, the description covers everything an agent needs: what the tool returns, when to use it, and how to narrow results. Nothing important is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the parameter description already states 'Only requirements in this category. Omit for the full checklist.' The tool description repeats this optionality and gives examples from the enum, but it does not add meaning beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Get') and resource ('Quebec Law 25 compliance checklist') and enumerates the concrete content areas. It clearly distinguishes this from sibling tools like privacy_get_enforcement_case, privacy_lookup_glossary_term, and privacy_search_enforcement_actions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says when to use the tool: when someone asks what Law 25 requires, how to comply, or for a gap-assessment checklist. It does not explicitly name alternatives or exclusions, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources