Marie-Christine Boulianne & Adrian Mares
November 7, 2024
From Law to Practice: PIAs in Research at COMTL
This conference examined the implications of the new Act respecting health and social services information, also known as " Bill 5," on research activities at the CIUSSS de l'Ouest-de-l'Île-de-Montréal (COMTL). Speakers addressed the new legal framework for Privacy Impact Assessments (PIAs, known as " EFVPs " in French) in the context of research, offering a pragmatic perspective on their implementation.
The presentation also explored the crucial role of PIAs (" EFVPs ") in obtaining authorizations to access health and social services information (HSSI) without the consent of the individuals concerned, as well as the evaluation criteria used by the competent authorities. Participants gained a clear understanding of the new legal requirements, authorization processes, and best practices for ensuring the protection of HSSI in their research projects. The presentation focused on practical advice and concrete strategies to effectively navigate this new regulatory landscape.
At the end of this presentation, participants were able to:
Understand the new legal framework established by Bill 5 for Privacy Impact Assessments (PIAs/EFVPs) in healthcare research at COMTL.
Identify the requirements and processes for obtaining authorization to access health and social services information (HSSI) without patient consent.
Apply best practices and practical strategies for protecting health and social services information in research projects within the new regulatory context.

Marie-Christine Boulianne is a key professional at the CIUSSS de l'Ouest-de-l'Île-de-Montréal (CIUSSS-ODIM), where she supports research initiatives and ensures compliance with personal data regulations. She brings extensive experience in health services administration and specializes in implementing Privacy Impact Assessments (PIAs) under Quebec's Law 25. Prior to this role, Marie-Christine was a project coordinator in mental health research for the CRISP group at the Douglas Institute. Her work focuses on promoting ethical research practices and robust data governance in the health sector.
Adrian Mares is a professional at the CIUSSS de l'Ouest-de-l'Île-de-Montréal (COMTL), where he works in the field of personal information protection. He focuses on the operational implementation of data protection policies, conducting privacy impact assessments (PIAs, known as EFVPs in French), and managing confidentiality incidents. Adrian actively participates in staff training activities and coordinates the Committee on Access to Information and Protection of Personal Information (CAIPRP). Previously, he was a research professional for the research and information management component at the Health Technology and Intervention Methods Assessment Unit. His approach is grounded in his training and professional experience in document and information management, allowing him to bring a comprehensive perspective to information protection in the health sector.
