Les blogues de Miller Thomson abordent des points de droit canadien sous un angle plus informel. Découvrez les diverses perspectives de nos avocats.
Blogue Cybersécurité de MT

( Disponible en anglais seulement )
A double-take on double-tracking: Takeaways from the privacy investigation into the Tim Hortons’ app
A recent investigation report into Tim Hortons, co-authored by the Office of the Privacy Commissioner of Canada (« OPC« ), Commission d’accès à l’information du Québec, Office of the Information and Privacy Commissioner of Alberta, and Office of the Information and Privacy...
( Disponible en anglais seulement )
Federal Commissioner tables recommendations for privacy law reform
In the context of the Canadian Government’s plans to replace the current federal private sector privacy legislation in Canada – The Personal Information Protection and Electronic Documents Act (the « PIPEDA« ), the Office of the Privacy Commissioner of Canada (the « OPC« ) has...
L’autorité française de protection des données impose une amende de 1,5 million d’euros à un fournisseur de logiciels de santé pour manquement à la protection des renseignements personnels
Les cyberattaques, la sécurité des données et les atteintes à la vie privée ne sont pas des sujets traités uniquement dans les discussions techniques et ésotériques des avocats, des spécialistes des TI et des communautés de la protection des renseignements...
( Disponible en anglais seulement )
Privacy Commissioners take stance against collection of biometric data
The collection (and over collection) of personal information, cybersecurity incidents, and data breaches have never been more topical. Advancements in technology have led to greater global interaction and allowed for commercial efficiency in a time of limited connection. With advancements...
La nouvelle loi québécoise sur la protection de la vie privée (projet de loi 64) est arrivée – Les entreprises canadiennes doivent en prendre note!
Alors que les tentatives du gouvernement fédéral de moderniser la loi canadienne, par le biais du projet de loi C-11, font du surplace dans le champ miné de la protection de la vie privée, le Québec a franchi la première...
( Disponible en anglais seulement )
Privacy injunctions: the judicial response to cyber ransom demands
Ransom demands from cyber terrorists have become an epidemic for businesses in Canada. As we have reported in previous articles, both for-profit and not-for profit businesses have been impacted. Governments and charities have not been spared from the destruction and...
( Disponible en anglais seulement )
OSFI updates cybersecurity breach notification requirements
The Office of the Superintendent of Financial Institutions (“OSFI”) released a new Advisory on Technology and Cyber Security Incident Reporting, effective August 13, 2021 (the “Advisory”) which seeks to govern how federally-regulated financial institutions (“FRFIs”) should disclose and report technology...
( Disponible en anglais seulement )
Ransomware trickles down into your supply chain – Kaseya cyberattack highlights cybersecurity risks and business impact
Over the July long weekend, Canadian, American, and other international businesses were victims of a far-reaching ransomware attack. The REvil group, a ransomware syndicate also known as Sodin or Sodinokibi, are believed to be behind the attack. This gang’s most prominent...
( Disponible en anglais seulement )
Canadian organizations take note – Data Protection Authority fines foreign-based business under GDPR for not having “Article 27” representative
As we have discussed in several previous articles, Canadian businesses and other organizations can be subject to the European General Data Protection Regulation (“GDPR”) for a number of reasons and in a number of different contexts, be it as a...
( Disponible en anglais seulement )
Ransomware – Privacy law, sanctions, and the pandemic
It is trite to say that no matter the sector, size, or location of an organization, cyberattacks can be devastating. As we have seen throughout 2020 and this year in Canada and elsewhere, data breaches and operational interruptions caused by...
Avis de non-responsabilité
This blog sets out a variety of materials relating to the law to be used for educational and non-commercial purposes only; the author(s) of this blog do not intend the blog to be a source of legal advice. Please retain and seek the advice of a lawyer and use your own good judgement before choosing to act on any information included in the blog. If you choose to rely on the materials, you do so entirely at your own risk.