I think it's important to keep in mind a couple of things. One is that there are these international agreements that create minimal requirements around intellectual property. You have to have a patent system. You have to put into place, as you say, measures to protect data. But they don't necessarily determine what your patent system looks like and what the requirements in your particular country for patenting are.
If there are differences between countries, companies often contest those. There's always a fight around it, but there's flexibility for a sovereign nation to define its own standards. So in the case of data that might be in clinical study reports, yes, it could conceivably be argued it's data that ought to be protected. It is scientific information. The definition of data is pretty sort of literal. If it's been treated as confidential, then companies will make that claim.
But if we've taken steps that we have as a country to protect data, or, which I would suggest is also true in this case, it is necessary to protect the public health, you can override any data protection or make that information available for the public. So it might be treated as confidential data by the company but it remains open to Canada to disclose that information.