( Disponible en anglais seulement )
New Canadian Cybersecurity Era?
On June 12, 2018, Public Safety Canada published Canada’s new National Cyber Security Strategy (the “2018 Cyber Strategy”). The 2018 Cyber Strategy details three national cybersecurity goals and the principles that will be followed over the next five years in...
( Disponible en anglais seulement )
NIST Cybersecurity Framework Updated
Recently, the U.S. Commerce Department’s National Institute of Standards and Technology (“NIST”) released Version 1.1 of its popular Framework for Improving Critical Infrastructure Cybersecurity (the “Framework”). This revised version refines, clarifies and enhances Version 1.0 of the Framework released in...
( Disponible en anglais seulement )
How Smart is Your Contract? Legal Considerations Around Smart Contracts
In a 2016 report by the World Economic Forum,[1] it was suggested that smart contracts based on blockchain technology could potentially codify financial agreements in a shared platform and guarantee execution based on mutually agreed conditions. This would significantly reduce...
( Disponible en anglais seulement )
Connected and Protected: Insuring Your Business Against Cyber Breaches
It was not long ago that a company’s cybersecurity plan was centred around the IT department, keeping internal networks protected and staying alert to malware and virus threats. Now, the risks have evolved: as companies have moved to more cloud...
( Disponible en anglais seulement )
It’s Official: Mandatory Data Breach Notification Coming on November 1, 2018
Last week, the Government of Canada published an Order in Council that will bring into force, as of November 1, 2018, the much anticipated mandatory breach notification and record-keeping requirements under the Personal Information Protection and Electronic Documents Act (“PIPEDA”)....
( Disponible en anglais seulement )
Key Cybersecurity Takeaways from the Privacy Commissioner’s Investigation into VTech
Earlier this year, the Office of the Privacy Commissioner of Canada (the “OPC”) published its findings from the investigation it conducted into the data breach suffered by VTech. The OPC’s findings provide Canadian businesses with some helpful guidance about (i)...
( Disponible en anglais seulement )
Cybersecurity Considerations When Moving to the Cloud – Part 2
This Article is Part Two of a Two-Part Series Part One provides an overview of the essential elements of the cloud computing ecosystem and describes what it means to be in the cloud. It concludes by setting out the first...
( Disponible en anglais seulement )
Cybersecurity Considerations When Moving to the Cloud – Part 1
This Article is Part One in a Two-Part Series Many organizations view the cloud as a cost-effective and practical approach when it comes to data processing, access, storage and management. A common misconception among organizations migrating their data to the...
Enquête du Commissaire à la protection de vie privée : Leçons en matière de cybersécurité
Récemment, le Commissariat à la protection de la vie privée du Canada (le « Commissariat ») a publié ses conclusions d’enquête concernant la cyber-attaque subie par le manufacturier de jeux vidéo Vtech. Les conclusions d’enquête du Commissariat constituent un guide utile pour...
( Disponible en anglais seulement )
Key Lessons from Federal Trade Commission’s 2017 Report on Privacy and Data Security
On January 18, 2018, the U.S. Federal Trade Commission (the “FTC”) released its annual report on Privacy & Data Security for 2017 (the “Report”). The Report reviews the FTC’s privacy and data security related activities in 2017, including in the...