Almost every business email ends with a small paragraph in grey text: the confidentiality disclaimer, also called a confidentiality notice or clause. Most people paste it out of habit, without really knowing what it does or what it is worth legally. This guide clarifies its purpose, its limits, its relationship to Quebec's Law 25, and provides copy-paste templates in English and French.
What does a confidentiality disclaimer do?
A confidentiality disclaimer serves three practical purposes. First, it flags the confidential nature of the message: it signals that the content is meant for one or more specific people. Second, it gives an instruction to unintended recipients: if you received this email by mistake, do not share it, notify the sender and delete it. Third, it acts as evidence of intent: in a dispute, the organization can show it had clearly marked the message as confidential.
It is, above all, a tool for awareness and warning, not a binding mechanism. It works better as a reminder of good practice than as a legal shield. Its uniform presence across all of an organization's emails also contributes to a culture of information protection.
Does a confidentiality disclaimer have legal force?
Its reach is real but limited, and it is worth being honest about that. A notice inserted unilaterally at the bottom of an email is not a contract: the recipient never agreed to it and cannot be bound by an obligation they discover after the fact. A few important nuances:
- It does not create a contractual obligation on its own. A genuine confidentiality obligation rests on a signed agreement (NDA, contractual clause).
- It does not replace professional privilege. Lawyers, notaries, accountants and health professionals are already bound to secrecy by their governing law and code of ethics; the notice merely restates it.
- It does not immunize against an accidental disclosure. Sending personal information to the wrong person remains an incident, even with a footer notice.
- It has evidentiary value. In a dispute, it helps establish that the sender had expressed an intent of confidentiality.
In other words, the notice is useful, but it does not excuse any of the truly protective technical and organizational measures: access control, encryption, training, and above all control over where the data travels.
Confidentiality disclaimers and Law 25: what to know
A common misconception is that adding a footer notice brings an organization "into compliance" with Law 25. It does not. Law 25 — Quebec's reform of personal information protection, administered by the Commission d'accès à l'information (CAI) — governs how organizations collect, use, communicate and delete personal information. It does not regulate the wording of an email notice.
Real compliance lives elsewhere: knowing where data is hosted, governing any transfer outside Quebec, and being able to delete personal information. A confidentiality disclaimer can be part of an organization's awareness measures, but it replaces neither a privacy impact assessment, nor controlled hosting, nor an architecture that avoids routing email through foreign servers. For that side of the topic, see our guide on email signatures and Law 25.
This article is provided for information purposes and does not constitute legal advice. The value of a confidentiality disclaimer depends on your situation; to assess it, consult a legal advisor or the Commission d'accès à l'information (cai.gouv.qc.ca).
Copy-paste confidentiality disclaimer templates (EN and FR)
Here are three templates to copy, from shortest to most complete. Adapt the organization name and contact details and, if needed, have them reviewed by a legal advisor. Each template is boxed below to make copy-pasting easier.
Template 1 — Short (everyday use)
This email and any attachments are confidential and intended solely for the named recipient(s). If you are not the intended recipient, please notify the sender and delete this message and any copies.
Template 2 — Standard (with distribution notice)
This message, including any attachments, contains confidential information intended exclusively for its recipient(s). Any unauthorized use, reproduction or distribution is prohibited. If this email reached you in error, please delete it immediately and inform the sender. Thank you for helping protect personal information.
Template 3 — Bilingual (EN / FR)
This email and its attachments are confidential and intended solely for the named recipient(s). If you received it in error, please delete it and notify the sender; any unauthorized disclosure is prohibited. — Ce courriel et ses pièces jointes sont confidentiels et réservés au(x) destinataire(s) visé(s). Si vous l'avez reçu par erreur, veuillez le supprimer et en aviser l'expéditeur ; toute diffusion non autorisée est interdite.
Tip: keep the notice short and discreet. A ten-line block at the bottom of every email is usually ignored and needlessly weighs down the signature. For complete layouts that include the notice, see our email signature templates.
How to add the disclaimer to your Outlook signature
Pasting the notice by hand on every workstation does not scale: versions drift, some people forget, and no one keeps the text current. The recommended approach builds the notice directly into a centrally managed signature template:
- Choose a disclaimer template suited to your sector and, if needed, have it reviewed by a legal advisor.
- Add the notice under the contact block, in smaller, discreet text, within the signature template.
- Provide a bilingual version (French and English) if your organization corresponds in both languages.
- Deploy the template centrally so the notice is identical and up to date for everyone.
- Review the wording periodically, especially if your contact details or obligations change.
With ATOM Signatures, the disclaimer is part of the signature template: it is inserted automatically in Outlook at compose time, client-side, without the email ever leaving Microsoft 365. A single change in the editor updates the notice for the entire organization.
Writing best practices
A few principles turn the notice into something credible and readable rather than a decorative block:
| Do | Avoid |
|---|---|
| Keep it short and clear (2 to 4 lines) | A ten-line legal block no one reads |
| Use smaller, discreet text | A notice as prominent as the signature itself |
| Provide an EN and FR version if needed | A unilingual notice in a bilingual context |
| Standardize the notice across the organization | Letting everyone write their own |
| Review the text periodically | Copying an old template with outdated wording |
Remember that the notice complements — without replacing — the measures that actually protect data. The factor that weighs most on personal-information protection remains where the data travels and is hosted, a topic we detail in our guide on signatures and Law 25.
Frequently asked questions
Is an email confidentiality disclaimer mandatory?
No. No Quebec law requires a generic confidentiality disclaimer at the bottom of an email. It is a good practice that flags the confidential nature of the message and asks an unintended recipient to delete it, without on its own creating a binding obligation.
Does a confidentiality disclaimer have legal force?
Its reach is limited. A one-sided notice does not by itself bind a recipient who never agreed to it, and it replaces neither professional privilege nor a confidentiality agreement. It mainly serves as evidence of intent and as a warning. For an assessment, consult a legal advisor.
Is the disclaimer connected to Law 25?
Indirectly. Law 25 governs personal information, not the wording of a notice. A disclaimer does not make an organization compliant: compliance depends on how data is hosted, communicated and deleted. The notice can, however, be part of awareness measures.
How do we apply the same disclaimer across the whole organization?
Manage the signature centrally instead of letting each person paste the notice by hand. With a tool like ATOM Signatures, the disclaimer is built into the signature template and inserted automatically in Outlook, ensuring uniform, up-to-date wording for everyone.
A uniform notice, applied automatically. ATOM Signatures builds your confidentiality disclaimer into the signature template and inserts it in Outlook client-side, with 100% Canadian hosting.
Go further: email signatures and Law 25 and email signature templates.
Sources
- Commission d'accès à l'information du Québec — cai.gouv.qc.ca
- Law 25 (official text) — LégisQuébec
This article is provided for information purposes and does not constitute legal advice. The templates offered are generic examples; to assess your situation, consult a legal advisor or the Commission d'accès à l'information.