Put privacy first: Data Protection Week 2025

From January 27 to 31, we are celebrating Data Protection Week - a key moment to raise awareness about the importance of protecting personal information among both the public and professionals. This year, the theme is simple: "Put privacy first."

A new era for the protection of health information

Since July 2024, new legislation has strengthened the protection of personal information in the healthcare sector: the Act respecting Health and Social Services Information (LRSSS), also known as Law 5. This law represents a major step forward in balancing the protection of users’ rights with access to health data for authorized professionals.

Two laws, two distinct frameworks

It’s important to differentiate between the two laws, which now apply in different contexts:

• Law 25: In effect since September 2022 and also known as the Act Respecting Access to Documents held by Public Bodies and the Protection of Personal Information. It applies to non-medical personal information. For example, employee records (human resources), transactional databases (payments, credit cards) and administrative documents.
• Law 5: This new law specifically governs information related to health and social services, strengthening requirements for both protection and access.

Process transformation at the MUHC

Before Law 5 came into effect, the Directorate of Professional Services was involved in handling requests for access to health information. Now, a new authorization process is being developed to manage these requests.

At the McGill University Health Centre (MUHC), this development comes with the appointment of two individuals:

• Dr. Alan Forster, Director of Innovation, Performance and Quality (DIPQ), for health and social services information.
• Me Nadim Elfangary, Manager - Corporate Secretariat, for employee personal information and administrative documents.

A balance between protection and accessibility

This new organization reflects a commitment to strengthening the protection of users' privacy while ensuring optimal access to health data for stakeholders. Thanks to this legislation, the MUHC is taking an important step towards modernizing and securing data management.

Want to learn more?

Attached are two fact sheets from the Ministry outlining the changes introduced by the law. (In French only)

LRSSS - Overview of information for professionals

LRSSS - Overview of information for researchers

Data Protection Week is the perfect opportunity to reflect on our practices, improve our processes, and put privacy protection at the heart of our daily actions.