Every industry has its own risks and obligations. Here are the ones we see most often in Greater Montreal SMBs, and how our services address them.
Your files hold confidential financial, legal and personal information, and your clients expect you to protect it. A single fraudulent email can be enough to divert a payment.
Law 25 comes on top of professional secrecy and your professional order’s rules. Among other things, it requires you to designate a person in charge of protecting personal information, keep a register of confidentiality incidents, and notify the Commission d’accès à l’information and affected individuals when there is a risk of serious injury. We help with the IT side (register, procedures, technical controls). For legal and ethical interpretation, consult your legal advisor or your professional order.
Medical and dental clinics, physiotherapy, optometry and other private practices: health information is among the most sensitive data there is, and an IT outage can bring reception and appointments to a halt.
A private practice of health professionals is generally covered by Quebec’s Act respecting health and social services information for health information, while other personal information (staff, billing, etc.) falls under the private-sector privacy act as amended by Law 25. Your professional order may also have its own requirements. We help with the technical measures (access, MFA, logging, backups, incident register). Have your obligations confirmed by your legal advisor or your order.
Shops, plants, distributors and retail stores: every hour of downtime is expensive, computers are often shared, and a lot of supplier business happens by email.
Law 25 isn’t only for clinics and professional offices: it also covers personal information about your employees (HR files, payroll) and your customers (loyalty programs, online orders). An incident register and a designated person in charge are required for every business. We help with the IT side; this is not legal advice.
We work with SMBs in every industry. The free cyber check shows you, within 2 business days, what an attacker can see about your business on the internet.
Book my free cyber checkThe risks described are typical examples for each industry, not client cases. Information about Law 25 and other laws is provided for general information and is not legal advice. Prices in Canadian dollars, before taxes.
