Protection of Personal Data and Privacy

Concept sheet | Science and Technology

This concept sheet explains what personal data is, how it’s collected, and why. 
Your information belongs to you! We give you tools to learn how to protect it. 

Personal and Sensitive Data

What Is Personal Data?

Definitions
  • Personal data is any information that can be used to identify an individual.
  • Sensitive data is personal information that could bring harm to the person in question if it is revealed.
Your name, address, dafe of birth, email address, photo, financial information, voice recording, school name, location, and social media profile are all examples of personal data. Information about your health, ethnic origin, religion, political opinions, sexual orientation, and sex life is considered sensitive and personal data.

You probably share personal data every day. For example, when you shop online, you may be asked for your name, address, and bank details. When you’re on social media, you might share photos of yourself, your list of friends, or your location.

You might also be sharing data without realizing it. When you use the internet, cookies collect information like your location, IP address, and browser history.

Here are some other examples of times when your personal data may be collected.

Your personal data may be collected when you fill out a form, use a web browser, or use AI.

It may not seem like much, but when you put all that information together, it can create a fairly comprehensive picture of who you are. This is what we call your digital identity

Everything you share online contributes to your digital identity. For example, based on a selfie, a photo of you in front of your house, and your social media activity, someone can determine what you look like, where you live, your emotional state, and your character.

Why Is Your Data Collected?

There are a few reasons why a business or other organization will collect your personal data.

To Provide a Service

To Personalize a Service

To Sell Your Information to a Third Party

To Train AI

What Are the Risks of Sharing Your Data?

When companies collect your data, they don’t necessarily have bad intentions. In fact, you probably find it very helpful when you’re looking for somewhere to eat and an app suggests a restaurant near you.

The problem is when one or more malicious individuals use your data. It all starts with data breaches. 

Data Breaches: A Common Occurrence

Definition

A data breach or data leak is an incident in which an unauthorized party gains access to personal information.

A data breach occurs when a cybersecurity flaw is exploited by someone with bad intentions. This flaw may be due to human error, a computer vulnerability, or some other cause.

Unfortunately, data breaches are commonplace. In Quebec alone, 514 privacy incidents were reported between April 2024 and March 2025 (Commission d’accès à l’information, 2024–2025)[1]. Worldwide, more than 22 000 privacy incidents were officially reported in 2025, and it is estimated that the actual number of incidents is much higher (Verizon DBIR, 2025)[2].


Social media[3] and AI[4] are not immune to this type of incident. 

Between 2015 and 2025, a large amount of data was leaked from social media and AI platforms. This included: names, email addresses, passwords, public profiles, location data, telephone numbers, birth dates, conversation histories, partial payment card numbers, etc.

For more information on the platforms involved, see the references at the bottom of this page.

Your Private Life Exposed

Once your personal data is in the hands of malicious individuals, it opens the door to privacy violations, which in many cases can damage your reputation, your finances, and your mental health.


Privacy violations can take many forms. Here are some examples. 

Doxing and Blackmail

Phishing

Discrimination and Loss of Opportunities

Identity Theft

Direct Financial Fraud

Multiple Account Compromise

The “I’ve Got Nothing to Hide” Trap

“I’ve nothing to hide.” You’ve probably heard this phrase 100 times, and you may have even said it yourself. Personal data and online security may not seem like a big deal.

It can be hard to understand the risks. Why?

  • Your data is digital, which can make it feel less real. 
  • Often, the risks are long-term, so it can make you think it is unlikely that something bad will happen.
    • A data breach can happen months or even years after you’ve shared something.
    • A malicious person might act years after a data breach so their victim will let their guard down. 
    • Your personal data may be stored for a very long time, so if you don’t delete it, that old data may be a point of vulnerability for a long time.

The rise of influencers and content creators has made it increasingly common to share a lot of information online without worrying about what’s personal or not. It can be hard to resist the temptation to share things when acting on impulse feels so much more satisfying in the moment. Remember that the goal isn’t to stop sharing altogether, but learning to share differently.

In the next section, we’ll give you the tools you need to protect your data!

6 Habits for Protecting Your Personal Data

When what you share falls into the hands of the wrong people, everything can go wrong, and what started as something fun or convenient can get out of control.

First, assume that everything on the internet is forever and that everyone will be able to see it one day or another. That goes for AI, social media, your phone’s apps and the internet in general.

Your data belong to you: Protect them!

Remember that the goal isn’t to stop sharing things online, but to rethink the way you share.

We share tips to help you develop good online privacy habits.

Habit 1: Share only the essentials.

Habit 2: Adjust your privacy settings.

Habit 3: Choose your AI tools carefully.

Habit 4: Use a secure web browser.

Habit 5: Don’t make unnecessary accounts.

Habit 6: Create strong passwords.

Example

You’re thrilled to have passed your driver’s license exam, and you just received it in the mail. You want to share the news with your friends on Instagram. Here’s an example of how to do it the right way.

Want to share some good news with your friends on Instagram? Use a strong password, protect your account, and only share the essentials.
Tu souhaites partager une bonne nouvelle avec tes amis sur Instagram? Utilise un mot de passe fort, protège ton compte et partage l’essentiel.
Tu souhaites partager une bonne nouvelle avec tes amis sur Instagram? Utilise un mot de passe fort, protège ton compte et partage l’essentiel.
Example

You’re at home, studying for an exam with the help of generative artificial intelligence (GenAI). Here’s how to apply your good privacy habits.

 Want to study for your exams with the help of AI? Apply your good privacy habits! Use a secure browser, choose a secure AI platform, don’t make unnecessary accounts, adjust your privacy settings, and only share essential information when writing your prompt.
Tu souhaites réviser tes examens à l’aide de l’IA? Applique les bons réflexes! Privilégie un navigateur sécurisé, sélectionne une plateforme d’IA sécurisée, ne t’inscris pas inutilement, ajuste les paramètres de confidentialité et limite tes partages à l’essentiel lorsque tu rédiges ta requête.
Tu souhaites réviser tes examens à l’aide de l’IA? Applique les bons réflexes! Privilégie un navigateur sécurisé, sélectionne une plateforme d’IA sécurisée, ne t’inscris pas inutilement, ajuste les paramètres de confidentialité et limite tes partages à l’essentiel lorsque tu rédiges ta requête.

At Alloprof, We Protect Your Data

Alloprof is committed to the privacy and security of all its users. In all its interactions with your data, Alloprof complies with Bill 25, a law that came into effect in 2022 to protect the privacy of Quebecers. 
To the extent possible, the data we collect on the site is anonymized and even encrypted when necessary.

What Data Does Alloprof Collect?

Why Is This Data Collected?

Remember Your Rights!

How Does Alloprof Protect Your Data?

References

  1. Commission d’accès à l’information du Québec (CAI). (2025). Rappel annuel d’activités et de gestion 2024-2025. https://www.cai.gouv.qc.ca/uploads/pdfs/CAI_RAAG-2024-2025.pdf

     

  2. Verizon Business. (2025). 2025 Verizon Data Breach Investigations Report. https://www.verizon.com/business/resources/reports/dbir/

     

  3. Examples of social media platforms that have suffered data breaches: 

     

Privacy Rights Clearinghouse. (2026). Data Breaches Chronology.
https://privacyrights.org/data-breaches

 

Information is beautiful. (2025). World’s Biggets Data Breaches and Hacks.
https://informationisbeautiful.net/visualizations/worlds-biggest-data-breaches-hacks/

 

Wikipedia. (2026). List of data breaches.
https://en.wikipedia.org/wiki/List_of_data_breaches

 

Upgard. (2025). The 83 Biggest Data Breaches of All Time.
https://www.upguard.com/blog/biggest-data-breaches

 

  1. Examples of AI platforms that have suffered data breaches:

     

Independent. (2025). ChatGPT user’s personal details exposed in data breach, OpenAI reveals.
https://www.independent.co.uk/tech/chatgpt-data-breach-openai-hack-b2874393.html

 

Bitdefender. (2024). Unknown People Fraudulently Accessed Spaces from AI Company ‘Hugging Face’.
https://www.bitdefender.com/en-gb/blog/hotforsecurity/unknown-people-fraudulently-accessed-spaces-from-ai-company-hugging-face

 

Cloaked. (2026). Were Your Secrets at Risk in the Google AI Data Breach? Here’s What You Need to Know.
https://www.cloaked.com/post/were-your-secrets-at-risk-in-the-google-ai-data-breach-heres-what-you-need-to-know

 

  1. Canadian Centre for Child Protection. (2026). Online Harms: Sextortion. Cybertip, Canada’s national tipline for reporting the online sexual exploitation of children.
    https://www.cyberaide.ca/fr/dangers-internet/sextorsion/?utm_campaign=sl&utm_term=/app/fr/internet_safety-sextortion

     

  2. Equifax Canada. (2025). One in Three Canadians Targeted by Scam Texts in Just Three Months, Equifax Canada Survey Finds.
    https://www.equifax.ca/about-equifax/newsroom/-/intlpress/one-in-three-canadians-targeted-by-scam-texts-in-just-three-months-equifax-canada-survey-finds

     

  3. Government of Canada. (2025). Don’t get hooked: understanding phishing and how to stay safe.
    https://www.getcybersafe.gc.ca/en/blogs/dont-get-hooked-understanding-phishing-stay-safe

     

  4. Express Employment Professionals. (2023). Data-Driven Workforce Trends for 2023. Harris Poll 2023. https://www.expresspros.com/jobinsights-canada

    Cited by CIC News. (2023). Canadian employers are using social media to screen job candidates. https://www.cicnews.com/2023/04/canadian-employers-are-using-social-media-to-screen-job-candidates-0434137.html

     

  5. Statistics Canada. (2025). Police-reported cybercrime, by cyber-related violation, Canada (selected police services). 
    https://www150.statcan.gc.ca/t1/tbl1/fr/cv.action?pid=3510000101&request_locale=en

     

  6. Security Daily Review. (2024). The RockYou2024 Security Breach: 10 Billion Credentials Compromised. https://dailysecurityreview.com/security-spotlight/the-rockyou2024-security-breach-10-billion-credentials-compromised/