Blog

News

IIAC Open Banking webinar

I am delighted to be participating at the IIAC Open Banking webinar taking place on September 17th, 2020 at 1:00 pm – 2:00 pm ET. Questrade and the IIAC FinTech Committee, led by Annie Sinigagliese, will be hosting Christine Day, Steven Boms and myself to present on Open Banking and Consumer-Directed Finance. I will present on privacy legal […] Read more

News

Ontario signals the coming of commercial privacy legislation

In a move of great significance to organizations doing business in Ontario, the province recently opened a consultation on private sector privacy regulation. The consultation, which runs until October 1, shows a strong commitment to moving forward with legislation that will create new and stringent privacy compliance requirements and potentially establish new employee privacy rights […] Read more

News

Manufacturers of internet of things devices: guidance from the Canadian Privacy Commissioner

There has been plenty written about the growth of the internet of things (IoT) market. Arguably, the global pandemic may have even crystallized the benefits of IoT solutions and pushed towards system-wide digitization across industries, communities, cities, and countries. While there is currently no IoT specific legislation in Canada, on August 20, 2020, the Office […] Read more

News

Cloud services – Guidance for managing cybersecurity risks

Cloud services make information technology (IT) resources (e.g., networks, servers, software applications and data storage) and related services (e.g., hardware and software maintenance and technical support) available as a utility or consumption-based service. Cloud services enable an organization to outsource its IT requirements to a specialist cloud service provider (a CSP) who can provide required services in […] Read more

News

Alerte COVID : La loi québécoise en matière de protection de renseignements personnels encadre déjà certaines pratiques d’employeurs ou entreprises pouvant être intrusives

Alerte COVID est l’application gratuite de notification d’exposition lancée par le gouvernement fédéral le 31 juillet dernier. Cette application qui peut être téléchargée volontairement par les Canadiens permet d’informer les utilisateurs s’ils ont été près d’une personne qui a reçu un diagnostic de COVID-19 et qui utilise également l’application, et les encourage à prendre des […] Read more

News

OPC affirms requirements for transferring personal information across borders for processing

On August 4, 2020, the Office of the Privacy Commissioner of Canada (the OPC) issued PIPEDA Report of Findings #2020-001 (the Report), which concluded that a Canadian financial institution (the FI) had complied with its obligations under the federal Personal Information Protection and Electronic Documents Act (PIPEDA) in connection with outsourcing aspects of its fraud claims processing services to […] Read more

News

“Schrems II”: Impacts on agreements involving processing personal data outside the EEA

On July 16, 2020, the Court of Justice of the European Union (CJEU) issued its judgment in case C-311/18, Data Protection Commissioner v. Facebook Ireland Ltd and Maximillian Schrems (the Schrems II Decision). The judgment invalidates the EU-U.S. Privacy Shield adequacy decision from the European Commission (the Privacy Shield Decision). It also requires EU data exporters relying on the European Commission’s […] Read more

News

Federal Court of Appeal Rules CASL Constitutionally Valid and Provides Interpretive Guidance

On June 5, 2020, the Federal Court of Appeal issued its decision dismissing appeals by CompuFinder challenging the constitutional validity and enforcement of Canada’s Anti-Spam Legislation (commonly known as “CASL”). The Court’s decision provides important interpretive guidance regarding CASL’s rules for implied consent and unsubscribe mechanisms and the exemption for business-to-business commercial electronic messages. Read more

News

Perspectives juridiques relatives aux véhicules autonomes : Analyse des directives sur la cybersécurité des véhicules au Canada

Les véhicules connectés et automatisés (« VC/VA ») présentent des possibilités et des risques pour l’industrie du transport canadien. Les VC/VA comportent des avantages importants qui pourraient améliorer la sécurité, l’efficacité et l’accessibilité des réseaux routiers. Par contre, en raison de leurs systèmes sophistiqués et de leur connectivité aux dispositifs et infrastructures de communication externes, les VC/VA […] Read more