( Disponible en anglais seulement )
“Made in Canada” – What is happening to Privacy by Design under the CPPA?
“Privacy by Design” has long been understood as the “gold standard” of data protection and at the core of how to sustain privacy rights in the digital age. It is a concept that can be said to have been “made...
( Disponible en anglais seulement )
Consent and the business activities exemption: A dive into the Consumer Privacy Protection Act (CPPA)
Now in its Second Reading, Bill C-11, the Consumer Privacy Protection Act (“CPPA”), is moving ever closer to adoption. The opening remarks by the Bill’s sponsor, MP Navdeep Bains, emphasized the law’s focus on control and consent with the aim...
( Disponible en anglais seulement )
Canadian privacy law 2.0: Artificial intelligence (AI) and Bill C-11, the Consumer Privacy Protection Act
In a recent announcement, the Canadian federal Privacy Commissioner of Canada (“OPC”) released a report containing recommendations on how AI should be treated under Canadian privacy law, and what protections need to be in place to ensure AI applications reach...
( Disponible en anglais seulement )
The dawn of Canadian Privacy Law 2.0: The Consumer Privacy Protection Act introduced
The long-awaited overhaul of federal private sector privacy law, as outlined in our previous blog post, is finally here. The Digital Charter Implementation Act was introduced for First Reading on November 17, 2020, as Bill C-11. If enacted, the new...
( Disponible en anglais seulement )
Transport Canada’s Vehicle Cyber Security Strategy
Transport Canada (“TC”) has partnered with the U.S. Department of Transportation’s Volpe Center to develop TC’s Vehicle Cyber Security Strategy (“Vehicle Cyber Strategy”). The Vehicle Cyber Strategy is intended to set out forward-looking cyber security priorities for TC over the...
( Disponible en anglais seulement )
M&A and cybersecurity – top nine ways to mitigate risk through due diligence
The authors would like to acknowledge the contribution of Iain Paterson, Chief Executive Officer at Cycura, a global team of leading cybersecurity experts headquartered in Toronto, Ontario. While the COVID-19 pandemic[1] is by no means over, increasing M&A activity and...
( Disponible en anglais seulement )
40% of data breach records insufficient – Canadian Privacy Commissioner releases findings on data breach register inspections
As the Canadian Office of the Privacy Commissioner (“OPC ») signaled it would do at the end of 2019, it completed a targeted investigation of data breach registers at a select number of organizations. The OPC released has now released a...
( Disponible en anglais seulement )
David Krebs comments in IT World Canada article on data breach class action lawsuit
IT World Canada, “B.C. appeal court green-lights data breach class action lawsuit”
The article discusses a recent decision from the British Columbia Court of Appeal that upholds a lower court decision certifying a data breach class action lawsuit against a trust company: The decision caught the eye of Saskatchewan privacy lawyer David Krebs of...
( Disponible en anglais seulement )
British Columbia Court of Appeal upholds certification of data breach class action
Following in the footsteps of Jones v. Tsige from the Court of Appeal for Ontario in 2012, the recent British Columbia Court of Appeal decision in Tucci v. Peoples Trust Co. (2020 BCCA 246) appears to be solidifying the future...
( Disponible en anglais seulement )
Ontario government launches consultations on establishing provincial privacy regime for private sector
On August 13, 2020, the Ontario Government (the “Government”) launched consultations on establishing provincial privacy legislation for the private sector, likely including not-for-profits and charities. The collection, use, and disclosure of personal information is currently governed by federal legislation, the...
