Cybersecurity and the dangers of the Internet of Things

October 31, 2022

While the Canadian government has said it intends to pass legislation dealing with cybersecurity (see Bill C-26 to enact the Critical Cyber Systems Protection Act), many companies have already taken significant steps to protect their IT infrastructure. However, the Internet of Things is too often overlooked in this process.

This is in spite of the fact that many devices are directly connected to the most important IT infrastructure for businesses. Industrial robots, devices that control production equipment in factories, and devices that help drivers make deliveries are just a few examples of vulnerable equipment. Operating systems and a range of applications are installed on these devices, and the basic operations of many businesses and the security of personal information depend on the security of the devices and their software. For example:

An attack could target the manufacturing equipment control systems on the factory floor and result in an interruption of the company’s production and significant recovery costs and production delays.
By targeting production equipment and industrial robots, an attacker could steal the blueprints and manufacturing parameters for various processes, which could jeopardize a company’s trade secrets.
Barcode scanners used for package delivery could be infected and transmit information to hackers, including personal information.

The non-profit Open Web Application Security Project (OWASP) has released a list of the top ten security risks for the Internet of Things.¹ Leaders of companies that use this kind of equipment must be aware of these issues and take measures to manage these risks. We would like to comment on some of the risks which require appropriate policies and good company governance to mitigate them.

Weak or unchangeable passwords: Some devices are sold with common or weak initial passwords. It is important to ensure that passwords are changed as soon as devices are set up and to keep tight control over them. Only designated IT personnel should know the passwords for configuring these devices. You should also avoid acquiring equipment that does not allow for password management (for example, a device with an unchangeable password).
Lack of updates: The Internet of Things often relies on computers with operating systems that are not updated during their lifetime. As a result, some devices are vulnerable because they use operating systems and software with known vulnerabilities. Good governance includes ensuring that such devices are updated and acquiring only devices that make it easy to perform regular updates.
Poor management of the fleet of connected devices: Some companies do not have a clear picture of the Internet of Things deployed in their company. It is crucial to have an inventory of these devices with their role in the company, the type of information they contain and the parameters that are essential to their security.
Lack of physical security: Wherever possible, access to these devices should be protected. Too often, devices are left unattended in places where they are accessible to the public. Clear guidelines should be provided to employees to ensure safe practices, especially for equipment that is used on the road.

A company’s board of directors plays a key role in cybersecurity. In fact, the failure of directors to monitor risks and to ensure that an adequate system of controls is in place can expose them to liability. Here are some elements of good governance that companies should consider practising:

Review the composition of the board of directors and the skills matrix to ensure that the team has the required skills.
Provide training to all board members to develop their cyber vigilance and equip them to fulfill their duties as directors.
Assess cybersecurity risks, including those associated with connected devices, and establish ways to mitigate those risks.

The Act to modernize legislative provisions respecting the protection of personal information sets out a number of obligations for the board of directors, including appointing a person in charge of the protection of personal information, having a management plan and maintaining a register of confidentiality incidents. For more information, you can read the following bulletin: Amendments to Privacy Laws: What Businesses Need to Know (lavery.ca)

Lastly, a company must at all times ensure that the supplier credentials, passwords and authorizations that make it possible for IT staff to respond are not in the hands of a single person or supplier. This would put the company in a vulnerable position if the relationship with that person or supplier were to deteriorate.

See OWASP top 10

Back to the publications list

Written by

Eric Lavallée
Partner, Lawyer and Trademark Agent
Selena Lu
Partner, Lawyer

Stay tuned for the latest legal news. Subscribe to our newsletter.

Subscribe to publications

Publications that might interest you

November 27, 2024

Announcement of U.S. tariffs: repercussions and trade strategies for Quebec businesses?

Nearly four years after the Canada-United States-Mexico Agreement (the “CUSMA” or the “Agreement”) came into force, U.S. President-elect Donald Trump announced on November 25, 2024, that he would impose 25% tariffs on all products entering the U.S. from Canada and Mexico, starting on the first day of his presidency, that is, January 20, 2025. Mr. Trump added that the tariffs would remain in effect until Canada and Mexico strengthened their border policies, which he blames for the increase in illegal immigration and the trafficking of devastating drugs in the United States. As a reminder, under the current provisions of the CUSMA, most products made in Quebec and Canada can be sold on U.S. markets without tariffs applying. And so, although we can only speculate and although Mr. Trump did not give details on this subject in his announcement, his future administration could indeed invoke a number of legislative authorities to implement such a measure. In particular, it could invoke the CUSMA’s essential security exception, which allows a party to the Agreement to apply any measure deemed necessary to protect its essential security interests, the national security exception in the Trade Expansion Act of 1962, which President Trump’s first administration used in 2018 to introduce tariffs on U.S. imports of certain steel and aluminum products, or the provisions of the National Emergencies Act. Needless to say, the announcement sent shockwaves through the political and business communities in Canada and Quebec what with the close commercial ties that the U.S. has with Canada, including with Quebec. In the first quarter of 2024 alone, Quebec’s merchandise exports to the U.S. reached CAN$21.2 billion, which accounts for nearly 74.6% of the province’s international merchandise exports and makes the U.S. Quebec’s main trading partner on the world stage. The imposition of 25% tariffs would therefore significantly affect Quebec businesses. It would make them less competitive on the U.S. market, on which they rely heavily to export their products. The measure could be particularly detrimental to the Canadian forestry industry, which is already severely affected by tariffs of nearly 15% on lumber. The U.S. economy would also be considerably affected by such protectionist tariffs. While in the short term, tariffs could benefit certain domestic manufacturers and producers, in the longer term, they are likely to harm the U.S. economy as a whole. Many U.S. manufacturers would face higher costs of inputs, and established supply chains would be disrupted, in particular in the automotive and steel industries. To continue to make profits, many U.S. companies could be forced to pass on the additional costs to their end consumers by raising the prices of their products, which would undoubtedly result in another wave of inflation. Worth mentioning also are the retaliatory measures that the Canadian government may want to implement in response to such tariffs, which could affect certain parts of the U.S. economy. Although the CUSMA provides for dispute resolution mechanisms, they are unlikely to lessen the impact of the measures that the Trump administration is considering in the short term, as a final decision under these mechanisms could take a long time to be issued. The new U.S. administration could use the announcement made on November 25 as leverage in future CUSMA renewal negotiations, the preparatory discussions for which are slated to begin next year, or in negotiations for a separate trade agreement between the U.S. and Canada that would exclude Mexico. Canadian businesses would do well to encourage their various trade associations to take steps to lobby both American decision-makers and their corporate customers in the U.S. and remind them of the harmful effects that the announced tariffs may have on American businesses. While we wait for a more detailed announcement with information concerning specific tariff exemptions in particular, we suggest that businesses choose their future trading partners with great care. In an increasingly protectionist global economic context, a strategy involving the diversification of trading partners is the best way for businesses to offset the risks associated with a particular country’s tariff policies. The Comprehensive Economic and Trade Agreement signed by Canada and the European Union in 2017, which our firm helped to negotiate, may prove to be an interesting solution in this respect. Our team of commercial law and tax professionals is available to help you find solutions to the issues arising from this announcement. With our expertise, we can assist you in your commercial negotiations and help you develop strategies to mitigate the impact that the announced tariff increase may have on your business.

Read more
November 22, 2024

Bill C-244: unlocking the right to repair

On November 7, 2024, Bill C-244, An Act to amend the Copyright Act (diagnosis, maintenance and repair)1 received royal assent, adding a new exception to the provisions governing technological protection measures (TPM) in the Copyright Act (CA). This legislative amendment adds section 41.121 to the CA, making it legal to circumvent TPMs for product maintenance, repair and diagnosis. What it means The new section 41.121 is expected to have a limited impact on the Canadian repair market. Although repairers can now circumvent TPMs to diagnose, maintain or repair a customer’s device, it is still forbidden for repairers to use the services of a TPM circumvention specialist, and specialized circumvention equipment is still prohibited. Furthermore, the absence of a fair dealing exception in this amendment poses ongoing risks of copyright infringement for these purposes. A number of questions remain unanswered, including the scope the courts will assign to the terms “maintenance” and “repair.” Does upgrading a device with improved technology fall within the definition of maintenance, or are repairers restricted to servicing devices according to original specifications? For example, if a connected device becomes obsolete after a new security standard is adopted, would replacing its software constitute maintenance? In short, the adoption of Bill C-244 represents but a small step toward the right to repair goods, and it serves as a prime example of how reconciling property rights with intellectual property rights can be challenging. Amendments made by C-244 Section 41.121, as introduced by C-244, has three paragraphs: Diagnosis, maintenance and repair 41.121 (1) Paragraph 41.1(1)(a) does not apply to a person who circumvents a technological protection measure for the sole purpose of maintaining or repairing a product, including any related diagnosing, if the work, performer’s performance fixed in a sound recording or sound recording to which the technological protection measure controls access forms a part of the product. For greater certainty (2) For greater certainty, subsection (1) applies to a person who circumvents a technological protection measure in the circumstances referred to in that subsection for another person. Non-application (3) A person acting in the circumstances referred to in subsection (1) is not entitled to benefit from the exception under that subsection if the person does an act that constitutes an infringement of copyright. Under the new section, the protection afforded to TPMs is set aside for maintenance and repair purposes, including the related diagnosing. Subsection 41.121(2) adds that the exception also applies to a person, such as a professional repairer, who repairs a product for another person. Subsection 41.121(3) further adds that the exception applies only to situations where there is no copyright infringement; for example, copyright infringement would be a person circumventing TPMs to repair a product, but taking advantage of the situation to make an illicit copy of a computer program. Bill C-244 reintroduced certain provisions of Bill C-272,2 which had been tabled in September 2020 but abandoned after the 2021 federal election. However, unlike the original text, the amendment passed on November 7, 2024, does not allow a person to manufacture, import or distribute TPM-circumvention devices to be used to perform repairs. It is rather limited to making the act of circumvention itself legal. Origin of the problem Bill C-272 was partly introduced in response to the decision in Nintendo of America Inc. v. King,3 which had considerably dampened the TPM-containing-device repair industry. In that case, the Federal Court awarded Nintendo of America Inc. $11.7 million in statutory damages following the circumvention of its TPMs, with $20,000 awarded for each of the 585 affected games, and an additional $1 million in punitive damages. Technological Protection Measures (TPMs), also known as digital locks or digital rights management (DRM) technologies, are mechanisms used to safeguard copyrights and sensitive information in the digital domain. They regulate access to or the copying, alteration and redistribution of digital content, such as audio and video files, software and e-books. TPMs can take various forms, including access codes, passwords, encryption keys, watermarks, digital signatures, encryption methods, and integrated hardware-based protections. These measures may be embedded in the files themselves, or in the devices that read, store or distribute them. DVD encryption and video game cartridge protections are well-known examples. The World Intellectual Property Organization (WIPO) first proposed a framework for protecting TPMs in 1996, anticipating that increased internet usage might escalate copyright infringement.4 In 1999, the United States ratified the framework by passing the Digital Millennium Copyright Act (DMCA), followed by Canada’s enactment of the Copyright Modernization Act5 in 2014. This legislative amendment introduced section 41.1 and related provisions to the Copyright Act (CA), prohibiting the circumvention of TPMs. Today, TPMs are ubiquitous, appearing in cars, tractors, medical implants, printer cartridges, game consoles, and various electronic devices. The $11.7 million award to Nintendo of America Inc. pursuant to this provision had a chilling effect on the repair industry.6 In response to the Nintendo decision, Bill C-272 proposed exceptions to the prohibition on circumventing TPMs for diagnosis, maintenance, and repair activities, as specified in paragraph 41.1(1)(a) of the CA. It also included an exception for the manufacture, importation, or distribution of products designed to circumvent TPMs for these purposes, addressing the restrictions noted in paragraph 41.1(1)(c) of the CA. Harmonization with the Canada-United States-Mexico Agreement The scope of the new section 41.121 introduced by Bill C-244 was significantly narrowed to prevent conflicts with the Canada-United States-Mexico Agreement (CUSMA). Article 20.66 of CUSMA requires member countries to enforce three categories of prohibitions related to TPMs: a prohibition on offering TPM circumvention services, a prohibition on the manufacture, import, or distribution of devices intended for TPMs circumvention, and a prohibition on the act itself of circumventing TPMs. Paragraph 5 of Article 20.66 specifies certain exceptions to these prohibitions, particularly for purposes such as interoperability, encryption research (security), and government activities (most of which are addressed under sections 41.11 and following of the CA), but it does not include an exception for the repair of goods. The exception provided in section 41.121 was thus limited to the third CUSMA category which involves the prohibition on circumventing TPMs themselves, as outlined in paragraph 41.1(1)(a) of the CA. As such, the prohibitions on offering TPM circumvention services, and manufacturing, importing or distributing TPM circumvention devices, set out in paragraphs 41.1(1)(b) and 41.1(1)(c), respectively, remain unchanged, even if the purpose of circumvention is to repair a device. Introduction of ambiguous wording Legal professionals may recognize that the changes made to the definitions in section 41 present new challenges. In an attempt to clarify how the new provision’s application, the legislator has added two conflicting expressions to the definitions of “circumvent” and “technological protection measure,” which may not have been necessary. Before After Technical protection measures and information on the rights mechanism Definitions 41 The following definitions apply in this section and in sections 41.1 to 41.21. circumvent means, a) (a) in respect of a technological protection measure within the meaning of paragraph (a) of the definition technological protection measure, to descramble a scrambled work or decrypt an encrypted work or to otherwise avoid, bypass, remove, deactivate or impair the technological protection measure, unless it is done with the authority of the copyright owner; and Technical protection measures and information on the rights mechanism Definitions 41 The following definitions apply in this section and in sections 41.1 to 41.21. circumvent means, a) (a) in respect of a technological protection measure within the meaning of paragraph (a) of the definition technological protection measure, to descramble a scrambled work or computer program, or decrypt an encrypted work or computer program or to otherwise avoid, bypass, remove, deactivate or impair the technological protection measure, unless it is done with the authority of the copyright owner; and b) … b) … technological protection measure means any effective technology, device or component that, in the ordinary course of its operation, a) controls access to a work, to a performer’s performance fixed in a sound recording or to a sound recording and whose use is authorized by the copyright owner; or technological protection measure means any effective technology, device or component that, in the ordinary course of its operation, a) controls access to a work, including a computer program, to a performer’s performance fixed in a sound recording or to a sound recording and whose use is authorized by the copyright owner; b) … b) … In the first instance, the legislator specifies that definition applies to “a work or computer program,” which suggests that a computer program is not considered a work. However, the second definition uses the phrase “a work, including a computer program,” implying the opposite. These clarifications were unnecessary, since the definition of “work” already includes literary works, and section 2 of the CA expressly states that literary works include computer programs. It is unfortunate that the text was adopted in its current form despite the numerous comments on this issue during parliamentary reviews.7 Striking a balance between property rights and intellectual property rights The debates surrounding these legislative changes illustrate the inherent challenges in striking a balance between the reduction of property rights, including the right to repair goods, and the promotion of intellectual property rights. For example, the Entertainment Software Association of Canada has advocated for excluding game consoles from the new exception.8 Paul Fogolin, the association’s Vice President of Policy and Government Affairs, argued that broadly opening the right to repair goods could jeopardize the video game industry by making it almost impossible for rights holders to pursue legal action against those tampering with their protection measures.9 Charles Bernard, Lead Economist for the Canadian Automobile Dealers Association,expressed concerns about increased auto theft risks.10 Catherine Lovrics, Chair of the Copyright Policy Committee, Intellectual Property Institute of Canada, anticipated cybersecurity risks.11 Several industry stakeholders believe that making documents, software, parts, and tools available for repair could elevate the risk of cyberattacks. Industry representatives in the United States have highlighted similar risks. For instance, the Association of Equipment Manufacturerssuggests that enabling the circumvention of TPMs could compromise emission controls on equipment, potentially leading to violations of environmental laws and risks to human life.12 Others have raised concerns about product liability issues.13 According to Apple and Panasonic, today’s electronics are too complex for non-specialists to repair and, thus, broadening the right to repair could compromise consumer safety.14 Concerns about safety, security, and liability are certainly legitimate; however, it is also valid to question whether intellectual property law is the appropriate vehicle to address these issues. During review of C-244, Shannon Sereda, Director of Government Relations, Policy, and Markets for Alberta Wheat and Barley Commissions, highlighted the potential difficulties farmers face when they cannot swiftly repair their equipment. She argued that “[t]he current legislative environment in Canada supports equipment repair monopolies by allowing OEMs to prohibit the bypassing of TPMs.”15 Anthony D. Rosborough, a researcher in the Law Department of the European University Institute, corroborated this viewpoint, stating that TPMs “function principally to protect technologies, rather than works or the rights of authors.” In his view, the industry sometimes relies on copyrights for what should be more appropriately protected with patents or trade secrets.16 The relaxation of TPM rules in Canada aligns with similar measures already implemented in the United States. On October 28, the Librarian of Congress renewed a series of exceptions to section 1201 of the Digital Millennium Copyright Act (DMCA), including provisions that allow the circumvention of certain protection measures for repairs.17 These exceptions are subject to renewal every three years and have so far been renewed twice since 2018.18 Over the past few years, the United States has taken several steps to promote the right to repair goods. In May 2021, the Federal Trade Commission (FTC) filed a detailed report19 on anti-competitive practices related to the right to repair. On July 9, 2021, shortly after the report was released, the U.S. President issued an Executive Order to combat such practices and encourage the development of a third-party or owner repair market.20 Since then, multiple states have enacted laws supporting the right to repair.21 On January 8, 2023, John Deere pledged to enable independent repairers to service its equipment.22 Apple Inc., historically opposed to expanding the right to repair, shifted its stance in 2022 by launching a self-service repair program and publicly supporting California’s new right-to-repair law.23 Last year, WIPO reported that 40 states had introduced legislation in favour of the right to repair.24 Here in Canada, the adoption of Bill C-244 represents another step in establishing the right to repair goods. This measure builds on another federal bill, C-59,25 which also received assent last June and amended the Competition Act to empower courts to compel suppliers to sell diagnosis or repair tools. At the provincial level, Quebec became the first province to enact right-to-repair legislation last year. 26 In the coming months, it remains to be seen whether the new section 41.121 of the Copyright Act (CA) will unlock the repair market. For the moment, the measure strikes us as somewhat timid.27 Parliament of Canada, LEGISinfo: C-244: An Act to amend the Copyright Act (diagnosis, maintenance and repair), Parliament of Canada, online: https://www.parl.ca/legisinfo/en/bill/44-1/c-244. Parliament of Canada, LEGISinfo: C-272, An Act to amend the Copyright Act (diagnosis, maintenance and repair), Parliament of Canada, online: https://www.parl.ca/legisinfo/en/bill/43-2/c-272. Nintendo of America Inc. v. King, 2017 FC 246, [2018] 1 FCR 509. WIPO Copyright Treaty, December 20, 1996, article 11, online: https://www.wipo.int/wipolex/en/treaties/textdetails/12740. Copyright Modernization Act, S.C. 2012, c. 20, assented to on 2012-06-29, online: https://laws-lois.justice.gc.ca/eng/AnnualStatutes/2012_20/FullText.html; Canada Gazette, Vol. 146,No. 23 – November 7, 2012, SI/2012-85 Order Fixing Various Dates as the Dates on which Certain Provisions of the Act Come into Force, P.C. 2012-1392, October 25, 2012, online: https: //canadagazette.gc.ca/rp-pr/p2/2012/2012-11-07/html/si-tr85-fra.html. Graham J. Reynolds, “Of Lock-Breaking and Stock Taking - IP, Climate Change, and the Right to Repair in Canada,” in 2023 101-1 Canadian Bar Review 32, 2023 CanLIIDocs 1144, p. 54, online: https://canlii.ca/t/7n4cj. Committee on Industry and Technology, 5 December 2022, Catherine Lovrics, Open Parliament, online: https://openparliament.ca/committees/industry/44-1/49/catherine-lovrics-2/; Committee on Industry and Technology, 15 February 2023, Viviane Lapointe, Open Parliament, online: https://openparliament.ca/committees/industry/44-1/59/viviane-lapointe-5/; Committee on Industry and Technology, 15 February 2023, Andy Fillmore, Open Parliament, online: https://openparliament.ca/committees/industry/44-1/59/andy-fillmore-6/; Committee on Industry and Technology, 15 february 2023, Patrick Blanar, online: https://openparliament.ca/committees/industry/44-1/59/patrick-blanar-1/. Entertainment Software Association of Canada, Bill C-244 – An Act to amend the Copyright Act (diagnosis, maintenance and repair), online: https://www.ourcommons.ca/Content/Committee/441/INDU/Brief/BR12209146/br-external/EntertainmentSoftwareAssociationOfCanada-e.pdf. Committee on Industry and Technology, February 8, 2023, Paul Fogolin, online: https://openparliament.ca/committees/industry/44-1/57/paul-fogolin-1/. Committee on Industry and Technology, February 8, 2023, Charles Bernard, online: https://openparliament.ca/committees/industry/44-1/57/charles-bernard-1/. Industry and Technology Committee, December 5, 2022, Catherine Lovrics, online: https://openparliament.ca/committees/industry/44-1/49/catherine-lovrics-2/. Emma Fillman, “Comprehensive Right to Repair:The Fight Against Planned Obsolescence in Canada,” (2023) 32 Dalhousie J Legal Stud 123, p. 145. online https://digitalcommons.schulichlaw.dal.ca/djls/vol32/iss1/5/. Irene Calboli, “The right to repair: Recent Developments in the USA,” World Intellectual Property Organization Magazine, August 2023, online: https://www.wipo.int/wipo_magazine_digital/en/2023/article_0023.html. Emma Fillman, “Comprehensive Right to Repair:The Fight Against Planned Obsolescence in Canada,” (2023) 32 Dalhousie J Legal Stud 123, pp. 142 and following, online https://digitalcommons.schulichlaw.dal.ca/djls/vol32/iss1/5/. Committee on Industry and Technology, February 8, 2023, Shannon Sereda, online: https://openparliament.ca/committees/industry/44-1/57/shannon-sereda-1/. Committee on Industry and Technology, February 8, 2023, Anthony D. Rosborough, online: https://openparliament.ca/committees/industry/44-1/57/anthony-d-rosborough-1/. Copyright Office, Library of Congress, Exemption to Prohibition on Circumvention of Copyright Protection Systems for Access Control Technologies, Federal Register, October 28, 2024, online: https://www.federalregister.gov/documents/2024/10/28/2024-24563/exemption-to-prohibition-on-circumvention-of-copyright-protection-systems-for-access-control. Copyright Office, Library of Congress, Exemption to Prohibition on Circumvention of Copyright Protection Systems for Access Control Technologies, Federal Register, October 26, 2018, online: https://www.federalregister.gov/documents/2018/10/26/2018-23241/exemption-to-prohibition-on-circumvention-of-copyright-protection-systems-for-access-control. Federal Trade Commission, Nixing the Fix: An FTC Report to Congress on Repair Restrictions, May 2021, online: https://www.ftc.gov/system/files/documents/reports/nixing-fix-ftc-report-congress-repair-restrictions/nixing_the_fix_report_final_5521_630pm-508_002.pdf. The White House, Executive Order on Promoting Competition in the American Economy, July 9, 2021, online: https://www.whitehouse.gov/briefing-room/presidential-actions/2021/07/09/executive-order-on-promoting-competition-in-the-american-economy/. X, Jon Campbell, December 29, 2022, online: https://twitter.com/JonCampbellNY/status/1608327624526548993; Colorado General Assembly, Consumer Right to Repair Agricultural Equipment, April 25, 2023, online: https://leg.colorado.gov/bills/hb23-1011; Minnesota Legislature, Minnesota Session Laws, 93rd Legislature, Chapter 57 – S.F. No. 2744, online: https://www.revisor.mn.gov/laws/2023/0/Session+Law/Chapter/57/; Sidley, “California Becomes Third U.S.State to Join the Right-to-Repair Movement,” October 24, 2023, online: https://www.sidley.com/en/insights/newsupdates/2023/10/california-becomes-third-us-state-to-join-the-right-to-repair-movement. John Deere, Memorandum of Undestanding, January 8, 2023, online: https://www.fb.org/files/AFBF_John_Deere_MOU.pdf. The Verge, “Surprise:Apple now supports California’s right to repair,” August 23, 2023, online: https://www.theverge.com/2023/8/23/23843506/apple-california-right-to-repair-sb-244. Irene Calboli, “The right to repair: Recent Developments in the USA,” World Intellectual Property Organization Magazine, online: https://www.wipo.int/wipo_magazine_digital/en/2023/article_0023.html. Parliament of Canada, LEGISinfo: C-59: An Act to implement certain provisions of the fall economic statement tabled in Parliament on November 21, 2023 and certain provisions of the budget tabled in Parliament on March 28, 2023; Parliament of Canada, online:https://www.parl.ca/legisinfo/en/bill/44-1/c-59. Québec National Assembly, Bill 29, An Act to protect consumers from planned obsolescence and to promote the durability, repairability and maintenance of goods, online: https://www.assnat.qc.ca/en/travaux-parlementaires/projets-loi/projet-loi-29-43-1.html. The author would like to thank Laura Trépanier-Champagne for her work in supporting the writing of this publication.

Read more
October 2, 2024

Proof of incapacity: analysis of CIUSSS de L’Ouest-de-L’île-de-Montréal (ST. Mary’s Hospital Center) c. R.C.

PROOF OF INCAPACITY: ANALYSIS OF CIUSSS DE L’OUEST-DE-L’ÎLE-DE-MONTRÉAL (ST. MARY’S HOSPITAL CENTER) c. R.C.1 Summary The authors comment on this decision rendered on September 20, 2024, in which the Court of Appeal ruled on the capacity to consent to care in the presence of a psychiatric disorder. The Court of Appeal overturned the first instance decision, which had found the respondent capable of refusing treatment with antipsychotic medications even though he had refuted his diagnosis, because he understood the benefits that antipsychotic medications could afford him and refused to take them because of their side effects. The Court of Appeal rather concluded that the trial judge had misapplied the five criteria to be used to assess whether a person is capable of consenting to care, particularly in the context where (i) the trial judge’s conclusion ran counter to the uncontradicted opinion of an expert; and (ii) there was much evidence supporting the fact that the respondent was incapable of making an informed decision. INTRODUCTION In this case, the Centre intégré universitaire de santé et de services sociaux de l’Ouest-de-l'Île-de-Montréal (the “CIUSSS”) appealed a decision rendered by the Superior Court on March 14, 2024, dismissing its application for an authorization to provide care to R.C., a 51-year-old man. The Superior Court had concluded that the CIUSSS had not proven that the respondent was incapable of consenting to care. The Court of Appeal was thus called upon to review the trial judge’s answer to the first question (incapacity to consent) in the analytical framework2 surrounding the test that has now been used for three decades.3 THE FACTS R.C. has a complex medical history. He was hospitalized several times between 2007 and 2019 for mental health issues, including suicidal ideation and personality disorders. In 2021, he was admitted to the CHUM for COVID-19-related complications having resulted in brain damage caused by hypoxia. From 2022 onwards, he made repeated visits to the emergency room, often to obtain benzodiazepines, leading him to become addicted. Even though he adhered to treatment with antipsychotic medication for a time, R.C. stopped taking his medication because of undesirable side effects. In January 2024, after an episode of confusion, he was taken to hospital where he was diagnosed with late-onset schizophrenia. However, R.C. refuted the diagnosis, claiming that his health problems were caused by an artificial intelligence device he believed had been implanted in his body. The psychiatrists who assessed him concluded that he was incapable of consenting to care. On February 16, 2024, the CIUSSS filed an application for authorization to re-hospitalize R.C. and administer antipsychotic medications, despite his categorical refusal. After analyzing the evidence, which essentially consisted of R.C.’s testimony and that of the CIUSSS psychiatrist, the Superior Court concluded that R.C. understood the nature of his condition and the benefits of the proposed treatment, despite his refusal to accept his diagnosis. The Court was of the opinion that the CIUSSS psychiatrists, in their analysis of R.C.’s capacity, had erroneously and repeatedly carried over his rejection of the diagnosis in a cascading fashion in their analysis of the five criteria from the decision in A.G.,4 thereby making the same error as the one that the Court of Appeal had identified in the M.H. decision.5 Despite the absence of a second opinion on R.C.’s capacity, the Superior Court had determined that he was able to consent to his care. According to the trial judge, in keeping with the teachings of the Court of Appeal in the F.D. decision,6 he therefore lacked jurisdiction to order care. For this reason, he dismissed the application for an authorization to provide care. THE COURT OF APPEAL’S DECISION The Court of Appeal began by reiterating the five criteria for assessing a person’s capacity, namely: Does the person understand the nature of the illness for which treatment is proposed? Does the person understand the nature and purpose of the treatment? Does the person understand the risks and benefits involved in undergoing the treatment? Does the person understand the risks involved in not undergoing the treatment? ls the capacity to consent to treatment affected by the patient's illness?7 It pointed out that the criteria are not cumulative and that it is incumbent upon the trier to assess them as a whole.8 Moreover, the mere fact that a person refuses care that would be in their best interest is not enough to conclude that the person is incapable,9 nor is their mere rejection of their diagnosis.10 In this case, the Court of Appeal considered that the Superior Court judge had committed a palpable and overriding error making its intervention warranted. It stated that the trial judge was obliged to express an opinion on whether the evidence proffered was sufficient, adding that the judge had a proactive role to play in protecting the interests of the person involved. If the trial judge felt that a point that had not been the subject in a genuine adversarial debate raised a problem in his view, it was up to him to ask questions.11 Subsequently, the court took extracts from the evidence consisting of a psychiatric report and the testimony of its author and went on to note that the evidence did not allow the trial judge to conclude that R.C. was capable of consenting or refusing the proposed treatment plan, on the contrary. Based on the same evidence, the Court declared R.C. incapable of consenting to care and sent the case back to the Superior Court so that it could determine whether there was indeed categorical refusal and assess the terms of the treatment plan sought. AUTHORS’ COMMENTS This decision of the Court of Appeal follows approximately 20 other decisions12 respecting orders authorizing care handed down by this same court, which have all further established and clarified the guiding principles surrounding such orders since the F.D. decision of 2015.13 These successive decisions have not only added to case law, they have refined the assessment criteria and legal requirements pertaining to applications for authorization to provide care. Such a development in case law shows that the courts are committed to circumscribing complex healthcare situations. Doing so involves striking a balance between the rights to freedom and self-determination and the protection of those who are vulnerable or otherwise unable to consent. On July 6, 2015, the Court of Appeal of Quebec marked a decisive turning point where orders authorizing care are involved by rendering a decision that sent a clear message to the Superior Court, namely F.D. c. Centre universitaire de santé McGill (Hôpital Royal-Victoria).14 In that decision, an analytical framework was established to ensure compliance both with the provisions of the law and the spirit of the law. Since then, the Court has handed down some 20 other significant decisions, each shedding additional light. The guiding principles derived from these decisions can be summarized under the following themes: Rights relating to the judicial process Every person has the fundamental right to contest an application for a order authorizing care, to be heard and to be represented.15 The judge must proactively protect the user’s interests and ensure that they are represented by a lawyer.16 Scope of the care plan Requiring a definite care plan does not mean dictating which medication should be administered in a limitative way.17 A judge may remove certain substances from a treatment plan if they deem that to be in the patient’s best interest.18 It is crucial to draw a distinction between preventive care and a treatment plan that includes various alternatives as the situation evolves.19 For a future hospitalization clause to be valid, there must be a reasonable foreseeability of hospitalization.20 When a patient is to be placed, the application for authorization must indicate where they are to be placed.21 Physical restraint may only be used if it is necessary to avoid serious harm, and must be limited to the minimum.22 A parent’s refusal to consent to a treatment plan may not be warranted if the plan is in the child’s best interests.23 Duration of the authorization When the person concerned is not cooperating and access to their previous medical records is not available, the judge must be especially careful in assessing whether the proposed care plan is legal, in particular in terms of its duration and scope.24 The duration of the care order should be as short as reasonably possible, without compromising the effectiveness of the treatment.25 When a future hospitalization is contemplated, the judge must take into account the time required to stabilize the patient.26 The 30-day period for a future hospitalization should not be considered an absolute limit, as a longer period may be deemed necessary after a thorough analysis.27 The evidence The mere fact that a relationship exists between an expert and a party does not make the expert’s testimony inadmissible: The circumstances surrounding the expert’s role must be reviewed.28 An expert who does not know a patient’s reasons for refusing treatment is not deemed to have breached their duty to inform.29 An expert may testify to reported facts without the possibility of anyone opposing them; however, this does not mean that reported facts are proven, as the rules of evidence remain stringent in this context.30 An expert report may suffice as testimony; the judge need not require the patient’s testimony if the patient cannot understand the issues at hand.31 Applications for safeguard orders may be unsuccessful where there is no expert report and it is not demonstrated that the matter is urgent.32 This review highlights the significant advances that the courts have made in overseeing applications for orders authorizing care and protecting vulnerable people. The analytical framework established in the F.D. decision remains relevant, and subsequent decisions have further refined its questions. The decision that the Court of Appeal handed down in Centre intégré universitaire de santé et de services sociaux de l’Ouest-de-l'Île-de-Montréal c. R.C. is milestone in the jurisprudence on court orders authorizing care. By overturning the lower court’s judgment, the Court of Appeal reaffirmed the need for a thorough assessment of the capacity to consent, emphasizing that the work of medical teams and applications made by healthcare institutions are important to ensure appropriate care. This decision not only underscores the fact that it is important to protect the rights of users, but also that the work of the court is crucial, for it must ensure that the criteria are met without substituting its opinion for that of the experts heard. CONCLUSION The decision discussed in this paper is part of a series of decisions that have clarified and enhanced the guiding principles established since the F.D. decision was handed down in 2015.33 The Court of Appeal has provided valuable guidelines for judges, institutions and healthcare professionals to use in their assessment of applications for authorization to provide care. Through a careful review of the circumstances of each case, the courts have shown that they are committed to effectively circumscribing complex health situations by ensuring that institutions have the tools they need to respond appropriately. Lastly, we must recognize that while progress has been made, there are still unresolved issues that need to be addressed. Recent court decisions, including the one that led to the R.C. decision,34 illustrate the importance of constant dialogue between those involved in the legal aspect of cases and those dealing with clinical realities. As jurisprudence continues to develop, paying close attention to future developments will be key to ensuring that healthcare institutions can act effectively in consideration of patients’ needs. 2024 QCCA 1231. F.D.c. Centre universitaire de santé McGill (Hôpital Royal-Victoria), 2015 QCCA 1139. See the landmark decision, Institut Philippe Pinel de Montréal c. A.G., 1994 CanLII 6105 (QC CA). Institut Philippe Pinel de Montréal c. A.G., 1994 CanLII 6105 (QC CA). M.H. c. Centre intégré universitaire de santé et de services sociaux de la Capitale-Nationale, 2018 QCCA 1948, para. 57. F.D. c. Centre universitaire de santé McGill (Hôpital Royal-Victoria), 2015 QCCA 1139. This decision, para. 13; with reference to Institut Philippe Pinel de Montréal c. A.G., 1994 CanLII 6105 (QC CA), pp. 28 to 33. This decision, para. 14; with reference to M. B. c. Centre hospitalier Pierre-le-Gardeur, 2004 CanLII 29017 (QC CA), para. 45; M.C. c. Service professionnel du Centre de santé et de services sociaux d’Arthabaska-et-de-L’Érable, 2010 QCCA 1114, para. 13. This decision, para. 14; with reference to M. B. c. Centre hospitalier Pierre-le-Gardeur, 2004 CanLII 29017 (QC CA), para. 46. This decision, para. 14, with reference to Starson v. Swayze, 2003 SCC 32, para. 79 and M.H. c. Centre intégré universitaire de santé et de services sociaux de la Capitale-Nationale, 2018 QCCA 1948, paras. 61–62. This decision, para. 18. We have excluded the following decisions from our analysis: Bédard c. Centre intégré universitaire de santé et de services sociaux du Nord-de-l’Île-de-Montréal, 2023 QCCA 508; M.G. c. Centre intégré universitaire de santé et de services sociaux de la Capitale-Nationale, 2019 QCCA 203; S.F. c. CIUSSS de Centre-Ouest-de-l’île-de-Montréal – Hôpital général juif – Sir Mortimer B. Davis, 2021 QCCA 1531; P.L. c. Centre intégré de santé et de services sociaux de la Montérégie-Centre, 2018 QCCA 318; N.G. c. Sir Mortimer B. Davis Jewish General Hospital, 2021 QCCA 1892; F.D. c. Centre intégré universitaire de santé et de services sociaux de la Capitale-Nationale, 2017 QCCA 1206. F.D.c. Centre universitaire de santé McGill (Hôpital Royal-Victoria), 2015 QCCA 1139. Ibid. M.H.c. Centre intégré universitaire de santé et de services sociaux de la Capitale-Nationale, 2018 QCCA 1948, paras. 68 and 69. A.N. c. Centre intégré universitaire de santé et de services sociaux du Nord-de-l’île-de-Montréal, 2022 QCCA 1167 , para. 30. Centre intégré universitaire de santé et de services sociaux de la Capitale-Nationale c. D.M., 2017 QCCA 1333, para. 25. Centre intégré universitaire de santé et de services sociaux du Saguenay-Lac-Saint-Jean c. O.G., 2018 QCCA 345, paras. 15 and 16. C.R.c. Centre intégré de santé et de services sociaux du Bas-St-Laurent, 2017 QCCA 328, para. 28. G.J. c. Centre intégré de santé et de services sociaux de Laval, 2021 QCCA 1944, paras. 24 to 26. Centre intégré universitaire de santé et de services sociaux de la Mauricie-et-du-Centre-du-Québec (CIUSSS MCQ) c. J.B., 2017 QCCA 1638,, paras. 30 to 35. X.Y.c. Hôpital général du Lakeshore, 2017 QCCA 1465, para. 20. A.P. c. Centre hospitalier universitaire Sainte-Justine, 2023 QCCA 58, para. 19. L.C. c. Centre hospitalier de l’Université de Montréal (CHUM), 2015 QCCA 1139, paras. 4 and 5. D.A. c. Centre intégré de santé et de services sociaux des Laurentides, 2016 QCCA 1734, para. 31. T.F. c. CIUSSS de l’Est-de-l’île-de-Montréal , 2022 QCCA 1306, para. 25. N.M. c. Centre intégré de santé et de services sociaux de la Montérégie-Centre, 2022 QCCA1567, para. 17. M.G. c. Centre intégré universitaire de santé et de services sociaux du Centre-Sud-de-l’Île-de-Montréal , 2021 QCCA 1326, para. 11. Centre intégré universitaire de santé et de services sociaux de l’Ouest-de-l’île-de-Montréal (Douglas Mental Health University Institute) c. I.A., 2023 QCCA 1100, para. 30. Institut universitaire en santé mentale Douglas c. W.M., 2016 QCCA 1081, para. 5 A.D. c. Centre intégré universitaire de santé et de services sociaux du Centre-Sud-de-l’île-de-Montréal, 2023 QCCA 1240, paras. 50, 56–57. A.F. c. Centre intégré de santé et de services sociaux des Laurentides, 2021 QCCA 928, para. 50. F.D. c. Centre universitaire de santé McGill (Hôpital Royal-Victoria), 2015 QCCA 1139. CIUSSS de l'Ouest-de-l'Île-de-Montréal (St. Mary’s Hospital Center) c. R.C.,2024 QCCA 1231.

Read more
August 2, 2024

Publication of the Regulation clarifying the obligations of Bill 96: Impacts on trademarks for products, advertising, and public signs and posters

The Regulation1 specifying the new obligations of Bill 962 was published in the Gazette officielle du Québec on June 26, 2024. It modifies the current Regulation respecting the language of commerce and business.3 These changes were expected considering the questions raised by the passage of Bill 96 in June 2022, which required clarification. In this bulletin, we will discuss issues related to the use of trademarks in connection with products, commercial publications, public signs and posters, and commercial advertising. Exception for recognized trademarks Good news! The Regulation reintroduces the exception for “recognized” trademarks,4 within the meaning of the Trademarks Act. Common law trademarks and trademarks registered with the Canadian Intellectual Property Office (“CIPO”) may be used without a French version, provided that no French version of the trademark appears in the Register. By regulation, the government has extended the scope of the exception to trademarks. Under Bill 96 it was to apply only to CIPO-registered trademarks. It has been extended to also cover common law trademarks. With this amendment, the government has made the rules around trademarks more consistent, whether they are used in connection with products, commercial publications or public signs and posters. It is still recommended to register your trademarks to protect your rights, but registration is no longer a condition for compliance with applicable regulations. Obligation to translate generic and descriptive terms included in trademarks The Charter of the French language5 (the “Charter”) stipulates that any inscription on a product, its container or its wrapping must be in French, and that no inscription in another language may be given greater prominence than that in French or be available on more favourable terms. The Regulation confirms that the term “product” includes its container, packaging and any accompanying documents or objects.6 The Regulation also clarifies the scope of the obligation to translate descriptions and generic terms included in trademarks: “Description” and “generic term”: A description refers to one or more words describing the characteristics of a product, while a generic term describes the nature of a product, excluding the name of the enterprise and the name of the product as sold.7 Designations of origin and distinctive names of a cultural nature are not considered a description or a generic term. In all likelihood, the reference to the “name of the product as sold” refers to the product’s main trademark. The obligation to translate generic terms or descriptions contained in the trademark would not apply to the main trademarks under which the product is sold. Thus, according to the example provided by the Quebec government, there would be no need to translate into French the descriptions or generic terms included in the main trademark BestSoap, as illustrated below. The question also arises regarding secondary trademarks, which are often used to designate a specific product within a range of products. Can we say that such a secondary trademark qualifies as a "name of the product as sold," in addition to the main trademark? Unfortunately, the guide published by the Office québécois de la langue française ("OQLF") does not provide any clarity on this matter, while the text of the Regulation appears broad enough to allow for such an argument depending on the circumstances. In our opinion, such an argument could be made in some cases, but we will need to await the position of the OQLF (or a court decision) for more certainty on this issue. The Regulation specifies that the French translation of the generic terms or descriptions included in trademarks must appear in French on the product or on a medium permanently attached to the product.8 However, it does not provide a definition of “a medium permanently attached to the product.” It will be interesting to see how practice develops in this area, and how the OQLF interprets this notion. Keep in mind the Charter’s principle that no inscription in another language should be available on more favourable terms. Companies opting for the medium option will need to ensure not only the permanence of the medium, but also its availability, under conditions that are at least as favourable. It should also be noted that the size of the French translation of generic terms and descriptions included in a trademark is not specifically addressed in the Regulation. However, the OQLF website specifies that no generic term or description in another language should take precedence over that appearing in French; the OQLF thus seems to apply the general rule contained in the Charter.9 This means that the French text must be at least equivalent in size and appearance to that in another language, so that the latter is not predominant. Transitional period: The Regulation allows a two-year grace period to give businesses time to comply with the above requirements. Until June 1, 2027, any product that does not comply with these new requirements may continue to be distributed, retailed, leased, offered for sale or lease, or otherwise offered on the market, whether in return for payment or free of charge, provided (i) it was manufactured before June 1, 2025, and (ii) no corresponding French version of the recognized trademark has been registered in the Canadian trademark register by June 26, 2024.10 Although it will still be necessary to make every effort to comply with obligations, this measure ensures that existing non-compliant products can be liquidated. Commercial publications The Regulation makes no changes to the rules governing commercial publications, such as catalogues, brochures, folders, commercial directories and other similar publications. The exception applicable to “recognized” trademarks, which had not been amended in Bill 96 or in the draft regulations, remains unchanged. Common law trademarks and trademarks registered with CIPO may be used without a French version, provided that no French version has been registered. Contrary to what had been envisaged in the draft regulations, websites and social media are not expressly named as commercial publications whose French version must be available on terms that are at least as favourable as any version in another language. To date, the interpretation adopted and applied by the OQLF and the courts is that websites and social media are considered commercial publications and must therefore follow the same rules. Nevertheless, we will remain watchful to see if the lack of explicit reference in the Regulation to websites and social media is of any significance, and if the OQLF will consider changes to its approach to these two types of communication. Advertising and public signs and posters It is well known that the Charter requires public signs and posters and commercial advertising in Quebec to be in French. They may be both in French and in another language provided that French is markedly predominant.11 The “recognized” trademark exception also applies to public signs and posters and commercial advertising. Thus, common law trademarks and CIPO-registered trademarks may be used without a French version, if there is no corresponding French version in the Canadian trademark register.12 For public signs and posters visible from outside premises, the rule of “sufficient presence” of French gives way to that of the “clear predominance” of French, when the trademark or business name is in a language other than French, in whole or in part.13 Public signage visible from outside premises includes not only the exterior of a building, but also premises inside a shopping centre.14 In such cases, a trademark or company name in a language other than French must be accompanied by a generic term, a description of the goods or services concerned, or a slogan, in French.15 This trademark or company name visible on a storefront or inside a shopping centre will be considered in the overall visual impact of the premises. For the same visual field, text written in French has much greater impact when (i) the French text occupies a space at least twice as large as that devoted to text in another language, and (ii) its legibility and permanent visibility are at least equivalent to that of text in another language.16 Finally, as concerns digital signage with alternating French and non-French text, the French text is considered to have a much greater visual impact when it is visible for at least twice as long as the non-French text.17 Note that there is no grace period for public signs and posters. Companies therefore have until June 1, 2025, to comply with the new rules. The examples below, from the Quebec government, illustrate the application of these rules: Here is a summary of the main changes to the Charter and the Regulation that will come into effect on June 1, 2025: Products (labels, containers, packaging, or any accompanying document or object) A “recognized” trademark (registered or used) may be used in a language other than French, unless a corresponding French version is on the Canadian trademark register. Any description or generic term included in a trademark must appear in French, excluding the name of the company or the name of the product as sold (and other specific exceptions); on the OQLF website, it is stated that no generic term or description in another language may take precedence over that appearing in French. The French translation of these generic terms or descriptions must appear in French on the product or on a medium permanently attached to the product. A grace period until June 1, 2027, is granted for any product that does not comply with these new requirements; such a product may continue to be distributed, retailed, leased, offered for sale or lease, or otherwise offered on the market, whether in return for payment or free of charge, provided (i) it was manufactured before June 1, 2025, and (ii) no corresponding French version of the recognized trademark has been registered in the Canadian trademark register by June 26, 2024. Commercial publications (catalogues, brochures, folders, commercial directories) No change: A “recognized” trademark within the meaning of the Trademarks Act (registered or used) may be used in a language other than French, unless a French version has been registered. It is expected that the rules governing commercial publications will apply to websites and social media, in line with the current interpretation of the OQLF and the courts. Public signs and posters A “recognized” trademark within the meaning of the Trademarks Act(registered or used) may be used in a language other than French, unless a corresponding French version is on the Canadian trademark register. In public signs and posters visible from outside premises, including inside shopping malls, when a trademark or commercial name is in a language other than French, even in part: French must be clearly predominant, taking into account the space allotted to the trademark or company name; and the trademark or company name must be accompanied by French terms, in particular a generic term, a description of the products or services, or a slogan. For the same visual space, the space allotted to French text must be at least twice as large as that devoted to text in another language, and its legibility and permanent visibility must be at least equivalent to that of text in another language. To learn more about this topic or for any questions concerning the Charter of the French language and its regulations, please contact our professionals or consult our previous publications! Regulation to amend mainly the Regulation respecting the language of commerce and business, Gazette officielle du Québec, (the "Regulation"). An Act respecting French, the official and common language of Québec, SQ, 2022, c. 14 (“Bill 96”). Regulation respecting the language of commerce and business, CQLR, c. C-11, r. 9. Regulation, supra, note 1, s. 2 (7.1) and s. 4 (25.1). Charter of the French language, CQLR, c. C-11, s. 51 Regulation, supra, note 1, s. 6 (27.1). Regulation, supra, note 1, s. 6 (27.2). Regulation, supra, note 1, s. 2 (7.1). Charter, supra, note 5, s. 51. Regulation, supra, note 1, s. 7. However, the grace period has been extended to December 31, 2025, for products covered by the new labelling standards set out in the Regulations Amending the Food and Drug Regulations (Nutrition Symbols, Other Labelling Provisions, Vitamin D and Hydrogenated Fats or Oils) (SOR/2022-168) or the Regulations Amending the Food and Drug Regulations and the Cannabis Regulations (Supplemented Foods) (SOR/2022-169). Charter, supra, note 5, s. 58. Regulation, supra, note 1, s. 4 (25.1). Charter, supra, note 5, s. 58.1 and Regulation, supra, note 1, s. 4 (s. 25.1). Regulation, supra, note 1, s. 6 (27.5). Regulation, supra, note 1, s. 6 (27.7). Regulation, supra, note 1, s. 6 (27.6). Components written in French will be presumed to meet these legibility and visibility requirements if they are permanent and are designed, lighted and situated so as to make them easy to read, both at the same time, at all times. Regulation, supra, note 1, s. 6 (27.6).

Read more