Upcoming Mandatory Breach Notification Refresher
In keeping with the global movement towards increased data protection legislation, as evidenced by the recent enactment of the General Data Protection Regulation (GDPR) in Europe and similar legislation adopted in California and Brazil, Canada will (as of November 1,...
Brazilian GDPR Comes into Force
On August 14, 2018, less than three months after the coming into force of the European General Data Privacy Protection Regulation (“GDPR”), the President of Brazil sanctioned, with partial veto, bill PLC 53/2018, which regulates the protection of personal information...
Legal Considerations of Blockchain Technology
Commonly known as Bitcoin’s underlying technology, blockchain is widely discussed but poorly understood. According to an HSBC global survey, 80% of individuals who have heard of “blockchain” said they do not understand it. While the technology has the potential to...
Canadian Privacy Commissioner says public profiles are private
On June 12, 2018, the Office of the Privacy Commissioner (“OPC”) [1] released its report [2] into Profile Technology Ltd.’s (“Profile Technology”) use of “publicly available” Facebook profiles. The OPC concluded that Profile Technology had not obtained the necessary consents from individuals...
California Passes New Privacy Law
As of January 1, 2020, organizations around the world who process personal data of California residents will be required to comply with the new provisions of the California Civil Code, as amended by the California Consumer Privacy Act of 2018...
Implicit Waiver of Privilege
Overview Solicitor-client privilege and litigation privilege are a fundamental component of our justice system. Solicitor-client privilege is intended to provide “full, free and frank communication between those who need legal advice and those who are best able to provide it,”...
( Available in French only )
Google c. Equustek: la saga continue
L’été dernier, la Cour suprême du Canada[1] confirmait la décision de la Cour suprême de la Colombie-Britannique[2] d’accorder une injonction interlocutoire mondiale contre Google. Ladite injonction ordonnant à Google de prendre les mesures quant à la désindexation mondiale de tous...
Meaningful Consent Under PIPEDA
As part of its effort to “breathe life” into the way consent under the Personal Information Protection and Electronic Documents Act (“PIPEDA”) is obtained, the Office of the Privacy Commissioner of Canada, along with the Offices of the Information and...
New Canadian Cybersecurity Era?
On June 12, 2018, Public Safety Canada published Canada’s new National Cyber Security Strategy (the “2018 Cyber Strategy”). The 2018 Cyber Strategy details three national cybersecurity goals and the principles that will be followed over the next five years in...
NIST Cybersecurity Framework Updated
Recently, the U.S. Commerce Department’s National Institute of Standards and Technology (“NIST”) released Version 1.1 of its popular Framework for Improving Critical Infrastructure Cybersecurity (the “Framework”). This revised version refines, clarifies and enhances Version 1.0 of the Framework released in...
