Grade A+ — Highly protective (score 100/100)
McGill University maintains a transparent privacy policy that outlines clear data processing practices, user rights, and retention schedules.
Highly protective policy with clear rights and retention standards.
Your Personal Information will be retained in accordance with our business and legal obligations and only as long as reasonably necessary to fulfill those obligations, subject to the time limits set out in the McGill University Records Retention Schedule (MURRS).
The university commits to a defined retention schedule for personal data, preventing indefinite storage.
McGill may also disclose your Personal Information to courts, law enforcement, or other government agencies in order to comply with legal and regulatory requests, applicable laws, or contracts.
The university will share your data with government authorities if required by law or legal process.
Before entering into effect, the intended modifications will be published on the University’s website along with a notice of such changes.
The university provides advance notice of policy changes by publishing them on their website.
Subject to certain exceptions under the Access Act, we will give you access to the Personal Information we hold about you.
You have a formal right to access the personal information the university maintains about you.
Last reviewed 2026-08-04 under rubric v3.5.