Important Privacy Commissioner Consultation Impacting Cross-Border Dataflows and Outsourcing

In a significant departure from its guidelines and decisions under the Personal Information Protection and Electronic Documents Act, the Privacy Commissioner of Canada introduced in an April 9, 2019 decision a requirement for an organization to obtain consent for outsourcing activities involving personal information to a service provider outside of Canada. In light of this significant change of position, the OPC has launched a Consultation regarding transborder dataflows and issued a supplementary discussion document that includes a list of questions for stakeholders to address in their responses. The OPC is inviting stakeholders to submit their responses by June 4, 2019.

You can read my interview in Data Guidance on the same topic.

This content has been updated on May 2, 2024 at 16 h 23 min.