A study reported by Mon Carnet indicates that Canadians are increasingly concerned about cybersecurity, and that businesses are struggling to reassure them. According to the available information, the source does not specify any particular city or province: the observation applies to Canada as a whole.

Key points

  • A study reported by the press shows growing concern among Canadians about cybersecurity.
  • Canadian businesses, according to the same source, are struggling to convince their customers that their protective measures are sufficient.
  • The source specifies neither a city, a province, nor a methodology: the observation applies to Canada as a whole.

What we know about the reported situation

According to the available information, the article points to growing concern among the Canadian public regarding cybersecurity, and a trust deficit toward businesses. No city, province, or specific figure accompanies this finding, which therefore remains a general trend rather than a documented case.

This type of finding echoes what we observe on the ground in Quebec: clients, partners, and funders are increasingly asking about the protection of personal information before signing a contract or making a donation. The absence of a clear answer now weighs on reputation as much as on technical risk.

What this means for a Quebec SME or nonprofit

For a small organization, this climate of distrust translates into concrete situations: a client or donor hesitant to share their data, a request for proposals demanding written guarantees, or a board of directors finally raising the question of cybersecurity. Responding to this requires evidence, not promises.

In Quebec, the Act respecting the protection of personal information in the private sector already frames these expectations: maintaining an incident register, conducting risk assessments, and, in some cases, notifying the Commission d’accès à l’information (Quebec’s access-to-information oversight body). These obligations exist independently of any specific incident, and an organization that can demonstrate compliance is better positioned to answer its customers’ questions.

What can be verified right now

There is no absolute protection, and no serious provider should promise one. Two simple checks, however, allow a small organization to know where it stands before a client or funder asks the question first.

The first check is to determine whether a confidentiality incident register exists and is kept up to date, as required by Quebec law. The second is to ask internally who would be informed first in the event of an incident and through what process: the absence of a clear answer is often the most revealing signal.

FAQ

Does this study target a specific business or sector?

No. According to the available information, the source refers to a general trend observed in Canada, without naming a specific business, sector, or province. This is a finding about public perception, not the report of a documented data breach or attack targeting an identified organization. We therefore recommend reading this type of publication as an indicator of climate rather than as a case to replicate point by point.

Does Law 25 apply to this case?

The Act respecting the protection of personal information in the private sector, commonly known as Law 25, applies to organizations operating in Quebec, regardless of size. It is not tied to this particular study, however, which does not describe a specific incident at a named organization. We mention it here as a useful reference framework for any Quebec SME or nonprofit looking to assess its own obligations.

How much does a cybersecurity upgrade cost for a small organization?

Every client’s situation is unique, which makes it impossible to honestly post a single rate: an organization’s size, existing systems, and desired level of risk all affect the scope of the work. What we can offer is an initial assessment that helps position an organization before discussing a plan of action tailored to its reality, regardless of its industry.

Sources

Source: Mon Carnet – de l’actualité numérique · https://news.google.com/rss/articles/CBMiywFBVV95cUxNSFF2V0lDdmF6M2RpN1dMWlNTUGMzV1dTRml1dHRFUEw3R1BzSkhqWW8yeHFsYnItSWdPWGRzUkl5d2taOFFMLUdDZlJDVUwxX2gwTkRKcjlQY3lzYU5FYzU5anAwU2J0TDNaSWloMHI5Z0ZjVDlqM291TldMQjRzTEhrNV9qbVBWaTIxNE96VkRyNGEya1p4MTdaVE90VUpoUVprMlNhNzM5NDdGcjBEMm8tWmRORTN6OXBVOWMwMHo0TWQ1Z1E3dEtOaw?oc=5