( Disponible en anglais seulement )
Receiving a Data Breach Notification – Commissioner’s Guidance for Individuals, Lessons for Organizations
As reported by numerous previous articles, Canada’s federal data breach notification laws have been in effect since Nov 1, 2018, and require all organizations subject to the Personal Information Protection and Electronic Documents Act (“PIPEDA”) to report to the federal...
( Disponible en anglais seulement )
Myron Mallia-Dare quoted in CBA article on the impact of artificial intelligence and automation on the legal industry
CBA/ABC National, "Between fear and hype"
As yesterday’s science fiction quickly becomes today’s reality, society is left struggling with the practical applications of the new tools and possibilities. Given the disruption already witnessed in other sectors, the question that inevitably surfaces is how much tools based...
( Disponible en anglais seulement )
Cybersecurity Risks in Medical Devices – Health Canada Adopts Guidance Document
Cybersecurity and data breaches are topics of high concern for Canadians. As discussed in previous blog articles, data breaches in Canada, North America and Europe have illustrated how financially motivated hackers and human error can put personal data at risk,...
( Disponible en anglais seulement )
Data Breaches, GDPR Fines, and Transborder Transfers – the Challenges of Assessing Cybersecurity and Privacy Risk
Data breaches, steep fines under GDPR, and changing requirements for transborder data transfers are just a few of the headline-making issues in the first half of 2019. It has been anything but quiet for cybersecurity and privacy professionals or organizations...
( Disponible en anglais seulement )
Impact of Recent GDPR Enforcement on Privacy Due Diligence in M&A
In our last blog article, we discussed the British data protection authority’s (“ICO”) announcement to impose large fines on British Airways and Marriott Hotels for separate large-scale data breaches affecting those businesses. In this article, we will turn our minds...
( Disponible en anglais seulement )
GDPR Shows its Teeth – UK Pursuing Record Fines for Data Breaches, Emphasizes Accountability
If there was any question as to the willingness of EU data protection authorities to pursue significant monetary penalties for violations of the European General Data Protection Regulation (“GDPR”), this past week has surely put those uncertainties to rest. The...
( Disponible en anglais seulement )
David Krebs co-presents in webinar entitled « So Your Not-For-Profit Has Been Hacked…Now What? »
Miller Thomson and BDO present a webinar on what to do in the event that your not-for-profit organization is faced with a cyber-incident. This webinar includes: Indications you’ve been hacked – things to look for PIPEDA regulations and understanding your legal...
( Disponible en anglais seulement )
Canada’s Digital Charter Triggers Reframing of Consultation on Transborder Personal Data Transfers
In April of this year, as discussed in our previous blog posts, the Office of the Privacy Commissioner of Canada (“OPC”) called for changes to the way Canadian privacy law treats transborder personal data transfers, and commenced a consultation process....
( Disponible en anglais seulement )
Managing the Many Faces of Cyber-Attacks: Lessons for the construction industry
Think BIG Magazine, 45-47
Imagine your company is part of a large infrastructure project with a host of suppliers, customers, as well as government participation and considerable public media attention. Now imagine that one morning you were told by one of your staff that...
( Disponible en anglais seulement )
David Krebs and Luanne Schlosser are quoted in The Hill Times article, « Privacy watchdog proposing rule change that could see firms revise data-use policies »
The Hill Times, "Privacy watchdog proposing rule change that could see firms revise data-use policies"
Companies could soon be rewriting their privacy policies to fit a change the privacy commissioner is contemplating that could mean getting a person’s explicit okay in all cases when their data is to be transferred across the border. Though the...