Traceability
Know that a professional report or act exists, who is responsible for it and which building it concerns.
Central registry · rationale
Why a registry?
The proposed registry is not intended to accumulate every document concerning a building. It targets a limited category of professional acts and documents in order to preserve a reliable, province-wide and durable record of information important to prevention and to derive anonymized indicators useful for public protection. In a periodic report, non-compliances and apparent anomalies would be distinguished; an apparent anomaly would not, by itself, create a non-compliance notice or a separate registry entry.
Summary data used for prevention and planning is anonymized; follow-up concerning a particular building remains restricted to authorized authorities. The professional registry does not replace documents that must be available on site under applicable building requirements; the OPSI proposal creates no separate obligation to retain a paper copy.
A province-wide memory of professional fire-safety acts — before information is lost, changes hands or has to be reconstructed.
La traçabilité, une clé pour une meilleure prévention.Traceability, a key to better prevention.
Traçabilité documentaire. Le registre prévoit un accès personnel « Mes rapports » limité aux documents signés ou approuvés par le professionnel, la validation du PDF final et de ses métadonnées, ainsi que la correction historisée des habilitations et des versions. Les codes EDF_ demeurent permanents et les drapeaux sont calculés selon les renseignements applicables; ces mécanismes ne certifient pas la conformité d’un bâtiment.
Document traceability. The registry provides limited personal access to “My reports” signed or approved by the professional, validation of the final PDF and its metadata, and historized correction of entitlements and document versions. EDF_ identifiers remain permanent and flags are computed from applicable information; these features do not certify building compliance.
The essential function
Preserve continuity.
Make action possible.
The registry would tie targeted documents to the building, the date and the responsible professional. Access would remain confidential, limited to authorized persons and fully logged.
Continuity
Prevent the history from disappearing when an owner, manager, service provider or professional changes.
Accountability
Tie the document to an identifiable authorized individual rather than only to the company that carried out the mandate.
Follow-up
Preserve critical and non-compliance-requiring-action notices, their classification changes and correction verifications needed to follow the most important situations.
Anonymized statistics
Measure the number and type of non-compliances, correction rates and times, changes over time and distribution by system, activity or territory, without reasonably allowing a person, professional, owner or building to be identified.
Secure API
Allow already authorized users — especially competent authorities — to integrate the registry with their own systems through a documented and secure API, without expanding their access rights.
Elsewhere in Canada
Province-wide visibility already exists in other forms.
In Ontario, the Office of the Fire Marshal receives data on fire-department responses and maintains province-wide statistics. In New Brunswick, the Office of the Fire Marshal also carries out provincial inspection and plan-review functions.
OPSI proposal
A different layer: prevention documented at the source.
The OPSI registry would not replace a Fire Marshal or take over those powers. It would instead centralize reports, approvals, non-compliance notices and follow-up produced in professional practice — information that can exist before a fire or emergency response occurs.
- no transfer of competent authorities’ powers;
- no public registry;
- targeted professional documents, with history and access controls.
The comparison concerns the ability to preserve structured province-wide information, not the identity of the institutions. The proposed model uses Québec’s professional system to create documentary continuity in prevention.
Fonctionnement opérationnel envisagé
Du geste professionnel
à un historique vérifiable.
Le registre est encore un projet. L’objectif est néanmoins de décrire dès maintenant le cycle opérationnel attendu et les exigences minimales qui devront encadrer sa conception.
- 01Acte professionnelInspection, essai, approbation, attestation ou autre acte visé.
- 02Professionnel identifiéL’auteur ou le signataire est relié à son statut et à son identité professionnelle.
- 03Bâtiment identifiéLe renseignement est rattaché au bâtiment ou au lieu concerné.
- 04Document créé et signéLe document conserve sa date, sa nature et son responsable.
- 05Dépôt lorsqu’il est requisSeuls les documents et renseignements déterminés par le cadre applicable sont versés.
- 06ClassificationLe système applique les catégories et règles d’accès pertinentes.
- 07Accès selon le rôleChaque utilisateur ne voit que ce qu’il est légalement autorisé à consulter.
- 08Automatic noticeWhere a rule provides for it, filing or automatic conversion immediately makes the information visible to the competent authority.
- 09Correction ou suiviLes correctifs et suivis peuvent être rattachés au dossier existant.
- 10Historique conservéLa continuité demeure malgré un changement de propriétaire, gestionnaire ou fournisseur.
- 11Audit des consultationsLes accès, extractions et transmissions autorisées demeurent traçables.
Matrice des rôles
Des droits différents pour des responsabilités différentes.
Dépôt et consultation dans les limites de sa pratique et de ses mandats.
Accès aux renseignements auxquels le régime lui donne droit relativement à son bâtiment.
Accès limité au mandat expressément confié par la personne responsable.
Accès nécessaire à l’administration, à la protection du public et aux fonctions prévues par la loi.
Access to records within its jurisdiction and the non-compliance notices the regime directs to it.
Accès seulement lorsqu’une base juridique l’autorise et pour la finalité permise.
No general access: only active non-compliance requiring action notices, their nature and correction deadlines. A minimal notification then indicates when this status ends to the insurer currently covering the building.
Seulement pour les bâtiments où travaillent des salariés effectivement représentés par une association affiliée : existence, nature et délai des seuls avis « à prendre en charge » en vigueur. Accès individuel, vérifié et journalisé; aucun droit autonome pour un syndicat local.
Ce que le registre ne doit pas devenir
- un registre public;
- un entrepôt général de tous les documents d’un bâtiment;
- un transfert des pouvoirs municipaux ou réglementaires à l’Ordre;
- un substitut à l’inspection ou au jugement professionnel;
- insurer access to reports, non-compliance under documented action or reporting-exempt non-compliances, or the rest of the registry;
- a mechanism in which a non-compliance-requiring-action notice or automatic conversion depends on prior payment of a fee.
Exigences de conception
La sécurité doit être construite dans le système.
Ces éléments sont des exigences proposées à valider lors de la conception; ils ne sont pas présentés comme des fonctions déjà implantées.
Contrôle d’accès fondé sur les rôlesPrincipe du moindre privilègeAuthentification multifacteurChiffrement des communicationsChiffrement approprié des données conservéesJournal d’audit immuableTraçabilité des consultationsSauvegardesPlan de continuitéGestion des incidentsEssais de sécurité indépendantsÉvaluation juridique de la protection des renseignements personnelsÉvaluation des facteurs relatifs à la vie privée lorsque requisePolitique de conservation et destructionMécanisme de rectification lorsqu’applicable
Proposed operating model
From the professional act
to a verifiable history.
The registry remains a proposal. The objective is nevertheless to describe the expected operating cycle and the minimum design requirements that should govern it.
- 01Professional actInspection, test, approval, attestation or another targeted act.
- 02Professional identifiedThe author or signer is linked to their professional identity and status.
- 03Building identifiedThe information is tied to the building or place concerned.
- 04Document created and signedThe document retains its date, nature and responsible person.
- 05Filing when requiredOnly documents and information determined by the applicable framework are filed.
- 06ClassificationThe system applies relevant categories and access rules.
- 07Role-based accessEach user can see only what they are legally authorized to consult.
- 08Automated routingWhere the rules provide for it, filing immediately makes the information visible to the competent authority or triggers the prescribed notice.
- 09Correction or follow-upCorrective evidence and follow-up can be tied to the existing record.
- 10History retainedContinuity remains despite a change of owner, manager or service provider.
- 11Access auditingAuthorized access, extraction and transmission remain traceable.
Role matrix
Different rights for different responsibilities.
Filing and consultation within the limits of practice and mandates.
Access to information the framework entitles the owner to receive about the building.
Access limited to the mandate expressly entrusted by the responsible person.
Access needed for administration, public protection and statutory functions.
Access to files within its jurisdiction and reports routed to it under the framework.
Access only where a legal basis authorizes it and for the permitted purpose.
No general access: only where access is legally authorized and subject to applicable conditions.
What the registry must not become
- a public registry;
- a general warehouse for every building document;
- a transfer of municipal or regulatory powers to the Order;
- a substitute for inspection or professional judgment;
- open access for insurers;
- a system in which an urgent report depends on prior payment of a fee.
Design requirements
Security must be built into the system.
These are proposed requirements to validate during design; they are not presented as features already implemented.
Role-based access controlLeast privilegeMulti-factor authenticationEncryption in transitAppropriate encryption of stored dataImmutable audit logTraceability of consultationsBackupsContinuity planIncident managementIndependent security testingLegal privacy assessmentPrivacy impact assessment where requiredRetention and destruction policyRectification mechanism where applicable
Potential economic effects
Fund the infrastructure.
Avoid doing the same work twice.
These benefits are potential effects to be measured during the preparatory work. They are neither a promise of savings nor a budget estimate.
No equivalent new public apparatus
Québec professional orders generally finance themselves. The model therefore allows these functions to be considered without creating a new recurring government body dedicated to professional oversight and the registry.
Proposed principal funding source
The proposal sets an initial $10 regulatory charge per eligible inspection report during the transitional phase and, once a region is activated, per eligible standalone professional filing, including an approved PDSI. Integrated diagrams are not charged separately, and danger disclosures remain free. Fee revenues and the costs they support are tracked for regulatory proportionality. The general fund may also pay group-insurance costs under the applicable statutory rules. Planned dues are $250, with a possible long-term reduction toward $100 if finances permit. No profit for the Order or its members: only proportionate funding of their mission.
Less searching and duplicate data entry
Authorized access can reduce time spent locating an owner, requesting a report, checking its date or reconstructing follow-up history. An API can also support integration with existing systems instead of manually re-entering information that is already structured.
Continuity that follows the building
Changing managers or providers should not require unnecessarily reconstructing an already documented history or searching for scattered records.
A better starting point
Where the mandate allows, knowing that earlier reports and follow-up exist can avoid some search work without replacing inspection or the new professional’s judgment.
A better-documented risk
For a building insured or being considered for insurance, the insurer may consult only the existence of an active non-compliance requiring action notice, its nature, its correction deadline and solely the indication that a non-suspensive review is in progress. A premium surcharge attributable to that notice may apply only while the status persists and ends once action is properly documented or correction verified.
The Office des professions notes that professional orders, although they exercise delegated powers in a public-protection mission, generally receive no government subsidy and must mainly finance themselves through dues and other fees. View source
RBQ · visibilité provinciale · article 20
Une vue sur tout le Québec.
Un signalement sans angle mort.
Le projet garantit à la Régie du bâtiment du Québec un accès permanent, en lecture seule, à l’ensemble des dossiers du registre, sans limitation au territoire d’une autorité municipale. L’accès se fait par une interface sécurisée ou une API, avec confidentialité et journalisation.
Comparer et filtrer les dossiers.
La RBQ peut suivre les rapports, les non-conformités déclarées, leurs statuts et leurs historiques, par municipalité, région, catégorie de bâtiment, type de non-conformité et ancienneté réelle des dossiers, calculée depuis le constat initial sans remise à zéro lors d’une reclassification. Il s’agit d’une visibilité de suivi, pas d’une nouvelle compétence d’intervention.
Éviter qu’une autorité soit seule destinataire.
A calculated “EDF_ — RBQ classification” signals an institutional conflict or the absence of a designated authority. During the 18-month initial-integration period, incomplete administrative designations do not create mass alerts; institutional conflicts remain flagged. Any actual “requiring action” notice without a designated authority is immediately routed to the RBQ even during the moratorium. No new intervention duty is imposed on authorities.
Autorités et dépôts multibâtiments : chaque autorité compétente peut déclarer un bâtiment oublié et gérer son propre assujettissement. Un seul rapport, fondé sur une seule norme technique, peut être déposé et rattaché aux codes EDF_ des bâtiments concernés, par exemple pour une pompe qui dessert deux bâtiments. Le registre conserve un seul document officiel et un seul identifiant de dépôt accessibles depuis chaque dossier, sans créer de regroupement permanent. Une fusion ou subdivision touchant plusieurs autorités exige leur accord; en cas de différend persistant, la RBQ tranche uniquement l’identification administrative suivant la modification législative proposée. Le registre conserve l’historique sans attribuer de nouvelle compétence à l’OPSI.
code EDF_ et triage obligatoire : chaque bâtiment possède un identifiant officiel code EDF_ dans le registre. Chaque autorité compétente doit lui associer sa propre clé de triage stable et unique dans ses dossiers; un changement exige sa demande écrite motivée et demeure tracé. Le code EDF_ n’est jamais remplacé par la clé.
La catégorie « EDF_ — RBQ » distingue ses motifs dans les « signalements spéciaux » du tableau de bord provincial. Il ne modifie aucune classification ni aucun délai, ne fait pas de la RBQ une autorité compétente par défaut et n’ajoute ni pouvoir de surveillance à l’OPSI ni pouvoir d’enquête ou de sanction à la RBQ.
RBQ · province-wide visibility · section 20
One view across Québec.
No blind spot in notifications.
The proposal guarantees the Régie du bâtiment du Québec permanent read-only access to all registry records, without being limited to a municipality’s jurisdiction. Access is available through a secure interface or API, with confidentiality safeguards and audit logging.
Search and filter records.
The RBQ can track reports, declared non-compliances, their statuses and histories by municipality, region, building category, type of non-compliance and age of records. This is a visibility tool, not a new intervention power.
Ensure an authority is not the sole recipient.
A single EDF_ — RBQ classification signals either an institutional conflict (an authority handles a building it owns or controls) or the absence of a designated competent authority. In the first case the RBQ receives notices alongside the authority; in the second it receives them even without another recipient. Absence of an authority is flagged as soon as it is known, even where no non-compliance has been reported.
Authorities and multi-building filings: each competent authority may register a missing building and declare applicability within its own field. One report based on one technical standard may be filed and linked to the EDF_ identifiers of the buildings concerned, for example when a pump serves two buildings. The registry retains one official document and one filing identifier accessible from each building record, without creating a permanent grouping. Mergers or subdivisions affecting several authorities require agreement; if disagreement persists, the RBQ determines administrative identification alone under the proposed legislative amendment. Historical records are preserved without giving OPSI additional jurisdiction.
code EDF_ and mandatory triage: each building has an official code EDF_ identifier in the registry. Each competent authority must associate its own stable triage key, unique in its records, with that code EDF_; changes require its written, reasoned request and remain logged. The key never replaces the code EDF_.
The EDF_ — RBQ classification shows its two reasons under “special reports” on the province-wide dashboard. It changes no classification or deadline, does not make the RBQ the default competent authority, and gives OPSI no oversight powers or the RBQ new investigation or sanction powers.
Insurers · section 23
Targeted access.
Never general access.
The proposal strictly limits insurer-accessible information and distinguishes access for an insured building from a one-off quotation lookup. It never grants full-registry access or a right to build a private parallel database.
For a building insured or under consideration, the insurer may consult only the existence of an active non-compliance requiring action notice, its nature and its deadline. An existing insurer may use an API where authorized; a prospective insurer may use only an individual consultation through the regular interface. No access to grounds of challenge, reports, plans, supporting documents or professional identities; no private parallel database or unauthorized reuse of results.
This limited opening is intended to reduce risk collectively: the competent authority is notified of dangerous situations and the insurer also receives a minimal signal allowing it to take a major hazard into account without access to the full professional record.
The proposal keeps the pricing use of this signal temporary: a premium increase specifically attributable to the registry notice could apply only while the notice has ‘non-compliance requiring action’ status. It would cease as soon as that status ends, with a pro-rata credit or refund where the increase was paid in advance.
To make that cessation automatic without expanding access, the registry would send the insurer currently covering the building a minimal notification stating only that the status giving rise to the signal has ended, together with the date and time. The new status, correction documents and the professional’s identity would remain confidential.
Centrales syndicales · article 24
Prévenir les risques là où travaillent les membres.
Sans voir les dossiers complets.
La v259 propose le même signal minimal que pour les assureurs, mais avec une autre justification : protéger les salariés représentés. La centrale devrait démontrer le lien entre son organisation affiliée, les travailleurs actuellement présents ou affectés et le bâtiment déterminé.
Seuls les avis « non-conformité à prendre en charge » encore en vigueur seraient accessibles : existence, nature et délai de correction. Les rapports, plans, pièces, noms des travailleurs, autres avis et historiques resteraient confidentiels. Un simple rattachement territorial ou sectoriel ne suffirait pas.
Un droit qui cesse avec la représentation.
Utilisateurs identifiés, finalité de sécurité des travailleurs, contrôle du périmètre à chaque accès, journal d'audit, pas de recherche massive. Dès que la centrale ne représente plus de travailleurs dans ce bâtiment, le droit d'accès et les notifications prennent fin. Les syndicats locaux ne possèdent pas de droit indépendant.
Droit projeté seulement : aucune autorisation de centrale n'est encore émise par le site.
Serious situations should not die in a private report.
The registry is the official channel. When a non-compliance reaches the serious-risk threshold but is not adequately handled, it carries “requiring action” status: the notice is filed without delay and immediately appears in the competent authority’s dashboard, without a separate call, email or transmission.
The same non-compliance may carry “under documented action” status when it is subject to immediate, serious and credible handling. It then retains its correction period. If that handling ceases or becomes insufficient, the classification may become “requiring action” before the deadline; if no verified correction is filed by the deadline, the change becomes automatic. No owner declaration is required.
Reporting-exempt non-complianceReport only · no automatic registry filing.
Non-compliance under documented actionReported to the registry · response documented · deadline monitored; requiring action if that response fails.
Non-compliance requiring actionReported to the registry · serious risk without an adequate response · immediately visible.
A dashboard to prioritize follow-up.
The dashboard becomes the competent authority’s entry point for covered situations: a serious-risk non-compliance appears when it carries “requiring action” status, either from the outset where adequate handling is absent or later if documented handling ceases, becomes insufficient or reaches its deadline without verified correction. Reporting-exempt non-compliances create no automatic file there. The registry organizes information; it never dictates the authority’s decision or action.
Sending a notice does not impose any new duty on an authority to investigate, decide, correct or intervene. Its existing powers and duties under other laws remain unchanged; the registry only documents the notice.
A competent authority can also filter reports by inspection date, “compliant” or “non-compliant” conclusion, standard and system; identify non-compliances requiring action, cases under documented action approaching their deadlines, successive non-compliant reports and periodic reports that appear missing after a 30-day grace period. These searches can be performed through the interface or API within its access rights, without creating an individual record for each anomaly.
Territorial view · exampleFictitious data
3dangerous · immediately visible
12critical · notice after deadline
8corrections filed
24records updated
En fonctionnement normal, un seul dépôt remplace la recherche du bon destinataire, les appels, les messages et les transmissions parallèles; l’appel téléphonique de secours pour un avis « à prendre en charge », dès l’indisponibilité du registre et de ses moyens électroniques de secours, demeure l’exception prévue par le projet. L’autorité pourrait utiliser le tableau de bord directement ou, si elle y est autorisée, intégrer les mêmes renseignements à ses propres outils par API. L’objectif est de réduire les délais administratifs et d’améliorer la continuité du suivi, tout en laissant l’exercice des pouvoirs publics entièrement à l’autorité compétente.
Lifecycle · EDF_ identifier · authorities
A building identified when the permit is issued. A record that retains its history.
The municipality or permit-issuing authority transmits the creation of a new covered building. Upon receipt, the registry assigns a permanent EDF_ identifier in the format EDF_XXXXXXXXXX (ten custom base-34 characters, excluding I and O). Confirmation of completion or occupancy makes the building active; a demolition authorization does not archive it until demolition is actually confirmed. Complete reconstruction receives a new EDF_ identifier historically linked to the old one.
The EDF_ identifier appears on every page of the relevant professional documents, including those given directly to clients. Each authority declares its buildings, areas and administrative keys without OPSI adjudicating jurisdiction. The moratorium avoids mass EDF_ — RBQ classifications for provisional missing designations, but an actual notice without a designated authority is immediately routed to the RBQ. The registry also checks the signatory’s authorization on the actual dates of the act and signature.
1. Permit issued
Authorized project · EDF_ identifier issued
2. Completion confirmed
Active building
3. Demolition authorized
Record remains active
4. Demolition confirmed
Record archived · EDF_ identifier preserved
Sample report page
Header: EDF_7H3B9L2Q4P | Inspection report
Every page, including appendices, displays the EDF_ identifier in its header or footer.
In summary
The registry turns scattered documents into province-wide continuity.
It replaces neither municipalities, fire safety services, the RBQ nor any potential Fire Marshal model. Instead, it gives professionals, authorities and other authorized persons common infrastructure to know what has been documented, preserve history, follow important situations and identify anonymized trends — with access that is limited, traceable and interoperable.
Le registre ne remplace pas le dossier professionnel. Les documents déposés conservent leur statut officiel dans le registre; le professionnel ou son organisation garde hors registre les pièces justificatives utiles. L’accès « Mes rapports » demeure distinct, et aucune copie personnelle en double n’est exigée si la conservation par l’employeur est conforme. Voir le règlement proposé
The registry does not replace professional records. Filed documents remain official in the registry; the professional or their organization keeps useful supporting materials outside it. “My reports” access remains separate, and no duplicate personal copy is required where the employer’s preservation is compliant. Read the draft regulation
Accès du PSI retraité : aucun accès permanent. Une consultation temporaire, ciblée et journalisée peut être autorisée pour la défense de droits dans une procédure; aucun dépôt ou accès général n’est permis.
Retired PSI access: no permanent access. A temporary, targeted, logged read-only consultation may be authorized for legal defence; no filings or general searches are permitted.