Is Your Email Putting Your P.eng. Licence at Risk? 2026 Guide for Canadian Engineers

Email, Confidentiality, and the Professional Seal: A Data-Protection Review for Canadian Engineers

Every professional engineer in Canada carries a seal, and with it individual accountability for the work and for everything surrounding it, including how a client's confidential information is protected. Most engineers think about that obligation in terms of what they say and who they talk to. Few have examined the email platform carrying that information, or what it means that the company running that platform holds a key to every message. This course examines that gap and what it means for professional practice.

Email is where confidential technical work actually moves. Design files, site assessments, bid strategies, and client approvals all travel by email, which makes the email platform the primary channel for the most professionally sensitive work an engineer produces. The course begins by inventorying what is really in an engineer's inbox, from tender data and client specifications to geotechnical reports, failure analyses, and candid pre-submission drafts, and connects each category to the confidentiality duty in the PEO Code of Ethics.

From there it builds an evidence-based case. It explains how standard email encryption works and why Google and Microsoft, as American companies, hold the decryption keys to every inbox and can be compelled under the US CLOUD Act to produce stored data without a Canadian court order and without notice to the engineer or client. It reviews the Canadian Centre for Cyber Security's findings on state-sponsored theft of commercially sensitive data in sectors where Canadian engineers work, along with documented breach cases and the AI-driven rise in email compromise. It sets out the regulatory consequences under PIPEDA and Quebec's Law 25, and the professional standard-of-care exposure through the PEO complaints process. It then introduces end-to-end encryption with zero-knowledge architecture, compares three platforms on data access, legal jurisdiction, and cost, and provides a step-by-step migration path for practices that decide to act, including account recovery setup and documenting the decision.

This course is designed for sole consultants, small and midsize engineering firms, and any licensed engineer responsible for how confidential client information is handled. No technical background is required.

Learning objectives

By the end of this course, participants will be able to:

1. Identify the categories of confidential client information that routinely travel through an engineer's email and relate them to the confidentiality duty under the PEO Code of Ethics.
2. Explain how the US CLOUD Act allows American technology companies to be compelled to produce stored data regardless of where their servers are physically located.
3. Differentiate transit encryption from end-to-end encryption with zero-knowledge architecture, and describe why the distinction matters for protecting client technical data.
4. Assess how the choice of email platform affects an engineer's professional standard of care and obligations under PIPEDA and Quebec's Law 25.
5. Evaluate email platforms against three criteria — data access, legal jurisdiction, and cost — in order to support a defensible, documented infrastructure decision.
6. Outline the steps involved in migrating to an end-to-end encrypted email platform, including account recovery configuration, custom-domain transfer, and documentation of the decision.

Try Proton Mail free for 14 days — no credit card required. Get started here: https://now.getproton.me/hrfjs8infz4q-o3hzta