Privacy and the Protection of Personal Information

Our Commitment to PrivacyÌý

At 91ºÚÁÏÍø, we are committed to protecting the privacy, confidentiality, and Personal Information of all members of our community—students, faculty, staff, alumni, researchers, research participants, and visitors. In a digital and data-driven world, safeguarding Personal Information is a priority in all areas of university life, from academic services and research to administrative processes and online engagement.Ìý

We process (that is, collect, use, communicate, retain, and destroy) personal information in accordance with Quebec’s (Access Act) and our Policy on the Governance of Personal Information, as well as other applicable privacy legislation.ÌýÌý

Our Privacy PrinciplesÌý

91ºÚÁÏ꿉۪s approach to privacy is guided by Quebec’s Access Act. The following principles inform how we process Personal Information across all university activities.Ìý

°Õ°ù²¹²Ô²õ±è²¹°ù±ð²Ô³¦²âÌý
Before or at the time of collection, we provide clear information about what Personal Information we collect, why we collect it, and how it will be used.Ìý

°ä´Ç±ô±ô±ð³¦³Ù¾±´Ç²ÔÌý
We only collect the Personal Information that is necessary for the specific purposes we tell you about, and never for unrelated reasons.Ìý

±«²õ±ðÌý
We use your Personal Information only for the purposes identified at the time of collection, unless the law allows or requires otherwise.Ìý

´¡³¦³¦±ð²õ²õÌý
Your Personal Information is accessible only to 91ºÚÁÏÍø staff who require it in order to perform their responsibilities.Ìý

³§²¹´Ú±ð²µ³Ü²¹°ù»å²õÌý
We take appropriate technical and organizational measures to protect your Personal Information against loss, unauthorized access, or misuse.Ìý

´¡³¦³¦³Ü°ù²¹³¦²âÌý
We take reasonable steps to keep your information accurate and up to date, and you have the right to request corrections if it is inaccurate or incomplete.Ìý

Ìý

RetentionÌý
We keep your Personal Information only as long as necessary to fulfill the identified purposes and legal requirements, after which it is securely destroyed or anonymized.Ìý

AccountabilityÌý
91ºÚÁÏ꿉۪s Privacy Officer (the Secretary-General) oversees compliance with our legal and policy obligations, and you may contact the Access and Privacy Office at any time with questions or concerns.Ìý

What Is Personal Information?Ìý

Personal information is defined by the Access Act as any information that allows an individual to be identified, directly or indirectly. This includes names, contact information, identification numbers, educational records, demographic information or any data that could be used to identify someone, either directly or indirectly.Ìý

Why we process Personal InformationÌý

We process Personal Information only for purposes that are directly related to our academic, mission, and administrative activities. These may include the processing of Personal Information to:Ìý

  • Assess and administer applications, admissions, and enrolment
  • Provide academic and career guidance, health and wellness services, and accommodations
  • Manage financial transactions, scholarships, and awards
  • Support research, teaching, and institutional planning
  • Fulfill legal obligations, including reporting to government authorities
  • Engage alumni and donors
  • Ensure the security and functionality of our digital platforms

Personal Information is stored securely and accessed only by authorized personnel who require it for legitimate university purposes.ÌýÌý

To learn more about how 91ºÚÁÏÍø processes Personal Information, please consult the 91ºÚÁÏÍø Privacy Notice and its Annex A.ÌýÌý

Privacy in ResearchÌý

91ºÚÁÏÍø upholds rigorous standards in research ethics, including the protection of Personal Information in research involving human participants. All research projects that collect, use, or disclose Personal Information must comply with federal and provincial privacy regulations and receive approval from a 91ºÚÁÏÍø Research Ethics Board (REB).Ìý

For details, visit the Research Ethics Board website.Ìý

Online PrivacyÌý

91ºÚÁÏ꿉۪s websites, digital platforms, and online services may collect limited technical information (such as IP address, browser type, and usage patterns) to enhance functionality, improve user experience, and ensure system security. Where applicable, cookies or analytics tools may be used—but always in line with 91ºÚÁÏ꿉۪s privacy commitments. You can adjust your browser settings to control the use of cookies.Ìý

For more information on how 91ºÚÁÏÍø uses cookies, please consult the 91ºÚÁÏÍø Cookies Notice.Ìý

In addition, many of 91ºÚÁÏ꿉۪s digital services are hosted on cloud platforms. To ensure the protection of personal information and institutional data, 91ºÚÁÏÍø follows a rigorous Cloud Directive that governs the acquisition and use of cloud services. Only vetted and approved cloud platforms may be used for storing or processing sensitive data, and all services undergo privacy, IT risk, and contract assessments.Ìý

For more information:Ìý

Your Privacy RightsÌý

As a public institution, 91ºÚÁÏÍø recognizes and respects your rights to:Ìý

  • Access your Personal Information held by the UniversityÌý
  • Request corrections to inaccurate or incomplete Personal InformationÌý
  • Understand how and why your Personal Information is processedÌý

To learn more about how 91ºÚÁÏÍø processes Personal Information and your rights, please consult the 91ºÚÁÏÍø Privacy Notice and its Annex A.ÌýÌý

Privacy OfficerÌý

Responsibility for privacy and access to information rests with the Secretary-General, who serves as 91ºÚÁÏ꿉۪s Privacy Officer and is also the person designated to respond to access requests under the Access Act.Ìý

ComplaintsÌý

91ºÚÁÏÍø is committed to addressing privacy-related concerns promptly and respectfully.Ìý
If you believe your Personal Information has not been handled in accordance with applicable laws or University policies, you may submit a complaint to the Access and Privacy Office using our Privacy Complaint Form.Ìý

Ìý

The Access and Privacy Office will:Ìý

  • Investigate complaints diligently, promptly, and confidentially;Ìý
  • Provide a written response within 30 business days; andÌý
  • Take appropriate corrective measures, where warranted, to mitigate risk and prevent recurrence.Ìý

Contact UsÌý

If you have questions about how 91ºÚÁÏÍø processes Personal Information, or wish to make a privacy-related request, please contact the Access to Information and Privacy Office at any of the following coordinates:Ìý

Email: privacy.secretariat [at] mcgill.caÌýÌý

Phone: 514-398-4719Ìý

Mail: Privacy Manager, James Administration Building, Room 313, 845 Sherbrooke Street West, Montreal, Quebec H3A 0G4Ìý

Related PoliciesÌý

Ìý

Back to top