BLOG

Writing an intervention plan

When personal information is disclosed, it is crucial to react quickly and effectively to minimize negative consequences and protect people concerned. Here is a general response plan you can follow...

Personal information mapping

Personal information mapping is a process of identifying, tracking and documenting the personal data collected, stored and processed by an organization. This helps understand what data is collected, where it is stored, how it is used and shared, and what security measures are in place to protect it...

What and when to report to the CAI (Law 25)

The Act respecting the protection of personal information in the private sector (Law 25) in Quebec requires organizations to immediately report certain types of incidents related to the security of personal information...

What are audit and monitoring for?

IT asset auditing and monitoring play a crucial role in compliance with Quebec Law 25 on the protection of personal information in several ways...

Emails and the law 25

Sending patient records by email is not necessarily prohibited, but it must be done in accordance with the requirements of Law 25 on the protection of personal information in Quebec...