In this article
- The scandal of a $310 million contract with no transparency: $310 million to Microsoft with no call for tenders, for the health data of millions of Quebecers.
- A dangerous technological dependence: over $2 billion in cloud contracts since 2011, and the CLOUD Act reaches the data even when hosted in Quebec.
- The failure of an opaque decision-making process: mandates awarded by mutual agreement since December 2024, and no public evaluation of alternatives like OVH, Numspot or Cloud Temple.
- The disastrous consequences of an irresponsible choice: $624.7 million, $637.5 million and now $310 million: sums that could have built sovereign infrastructure in Quebec.
- Towards digital sovereignty for Quebec: the Ligue des droits et libertés calls for government-run hosting on free software: suspend the contract and hold a public consultation.
The scandal of a $310 million contract with no transparency
Health Québec has just crossed a red line by entrusting its most sensitive data to Microsoft under a $310 million contract awarded without a call for tenders1. That decision, taken in complete opacity, amounts to a plain abandonment of our digital sovereignty and puts the personal health data of millions of Quebecers at risk.
A dangerous technological dependence
The growing grip of the American giants
This decision is part of a heavy and worrying trend. Since 2011, Quebec has awarded more than $2 billion in cloud computing contracts, including $624 million to Microsoft and $89 million to Amazon2. That dependence on private American companies is a genuine threat to security and to human rights2.
Using Microsoft for health services in Quebec is nothing new. The Réseau québécois de la télésanté already offers health professionals Microsoft 365 tools, justifying that approach by "government orientations aimed at an optimal use of information technology"3. This gradual normalization of American technological dependence does a poor job of hiding the systemic risks it creates.
Major legal risks, ignored
Choosing Microsoft exposes our health data directly to the most intrusive American laws. The CLOUD Act of 2018 and the Patriot Act of 2001 let the American government reach personal data hosted with American companies, even when the servers sit physically in Quebec42. That legal reality turns every piece of Quebec health data into information the American authorities can potentially reach.
The situation becomes more critical still with the election of Donald Trump and his administration's open hostility towards Canada42. Our health data risks being misused, diverted to other ends, or subjected to any other form of abuse, not least through the use of artificial intelligence2.
The failure of an opaque decision-making process
A glaring lack of transparency
The way this $310 million contract was awarded is a perfect illustration of how Health Québec has drifted on governance. Since it was created on 1 December 2024, this state corporation has already paid out more than $3 million in contracts to private firms56, multiplying mandates awarded by mutual agreement with no clear justification.
The practice raises fundamental questions about Health Québec's capacity to manage public money responsibly. As Régis Blais, a professor specializing in health policy at Université de Montréal, puts it: "Wasn't there already expertise at the Ministry of Health? [...] It is as if we recreate a ministry and then have to go looking for new expertise"56.
Alternatives left aside
The French experience shows that European alternatives exist and can be evaluated seriously. Three French providers — OVH Cloud, Numspot and Cloud Temple — were assessed for similar projects789. Those solutions were not selected in the French case, but their existence proves that stepping outside the American technology monopoly is possible.
In Quebec, that reflection seems entirely absent from the decision-making process. No serious evaluation of sovereign alternatives has been made public, and no technical justification has been offered for setting aside possible Quebec or Canadian solutions.
The disastrous consequences of an irresponsible choice
An unsustainable economic bill
The savings promised by giving priority to private cloud computing have not materialized2. The cost of these technology contracts reaches dizzying heights: $624.7 million over five years for the contracts with LGI Solutions Santé10, $637.5 million for a medical imaging contract11, and now a further $310 million for Microsoft.
Those pharaonic sums could have gone towards building sovereign infrastructure, creating skilled jobs in Quebec and building lasting technological expertise. Instead, we are feeding the profits of foreign companies while mortgaging our technological autonomy.
Losing control of our strategic data
By entrusting our health data to Microsoft, Quebec gives up its capacity to control and protect information that ranks among the most sensitive its population holds. That decision runs against the fundamental principles set out in Health Québec's own personal information governance policy, which states that "Santé Québec has a duty to protect the health and social services Information and the personal Information it holds"12.
Towards digital sovereignty for Quebec
Solutions do exist
The Ligue des droits et libertés has launched a campaign for digital sovereignty that puts forward concrete solutions4. The government must "take back control over the hosting of our data by guaranteeing transparent and secure management that protects human rights"4. That means "putting an end to disproportionate private subcontracting and developing its own data hosting infrastructure, giving priority to free software"4.
The urgency of acting
Time is short. Every new contract with the American technology giants sinks us deeper into a dependence that will be harder and harder to escape. The Government of Quebec must immediately suspend this contract with Microsoft and open a genuine public consultation on the technological future of our health system.
A question of national dignity
Health Québec's choice to entrust our most intimate data to Microsoft is not merely a technical decision: it is an abandonment of sovereignty that turns us into digital vassals. At a time when other nations are building their own technological capacity, Quebec is choosing the easy road at the expense of its autonomy.
Our health data is not a commodity to be sold off to the highest bidder. It is a collective heritage that deserves to be protected by Quebec institutions, according to our values and our laws. There is still time to correct course, but the window is closing fast.
Quebec's digital future is being decided now. Will we accept becoming a digital colony, or will we have the courage to build our own technological sovereignty? The answer to that question will determine not only the security of our personal data, but also our capacity to remain masters of our collective destiny in the digital age.