Publications

Articles

• Eloïse Gratton, "Data governance and privacy risks in Canada: A checklist for boards and c-suite", November 2, 2022.
• Éloïse Gratton, Daniel El Khoury and Eric Charleston, "An Update on New Québec Confidentiality Incidents and Record-Keeping Requirements", Electronic Healthcare Law Review, Vol. 12 no 2,  November 2022  
• Eloïse Gratton, "The inside scoop on how to become a privacy lawyer: 10 tips from the top", May 12, 2022. 
• Eloïse Gratton, "Canada’s privacy leaders: 10 inspiring women shaping the data privacy landscape", March 8, 2022.
• Eloïse Gratton, Elisa Henry, François Joli-coeur, Max Jarvie, Julie Gauthier, Andy Nady et Simon DuPerron, End of clause-by-clause consideration of Bill 64: Where we Stand, (2021), 18 C.P.L.R. (November 2021).
• Nicolas Vermeys et Eloïse Gratton, Les mutations causées par l'intelligence artificielle (IA), Droit-Montréal no 28, p. 44, Automne 2021. 
• Eloïse Gratton, Simon Du Perron and Andy Nagy, The Right to Erasure of Personal Information in Canada: Between Fact and Fiction, 18 C.P.L.R. no. 10 (September 2021)
• Eloïse Gratton, Elisa Henry, Daniel Michaluk, Ira Parghi, François Joli-Cœur, Max Jarvie, Katherine McNeill and Andy Nagy, Canada’s Consumer Privacy Protection Act: Impact for Businesses, 18 C.P.L.R. no. 2 (January 2021).
• Eloïse Gratton and Andy Nagy, OPC Lays Groundwork for a Canadian Right to Be Forgotten in Recent RateMDs Privacy Decision, 18 C.P.L.R. no. 1 (December 2020).
• Eloïse Gratton and Andy Nagy, Anonymous Video Analytics’ Future Uncertain After Canadian Privacy Regulators’ Investigation, 29 Canadian Corporate Counsel 92-98 (November 2020).
• Éloïse Gratton, Edona C. Vila and Max Jarvie,  Manufacturers of Internet of Things: Guidance from the Canadian Federal Privacy Commissioner, (2020), 17 C.P.L.R.
• Eloïse Gratton, Elisa Henry, François Joli-coeur, Max Jarvie, Andy Nagy, Proposed Amendments to Québec Privacy Law: Impact for Businesses  17 C.P.L.R. no 9 (August 2020).  HTML
• Eloïse Gratton and Max Jarvie, "Privacy Commissioners’ Report of Findings on Aggregate IQ: Challenges with Position on Service Providers' Obligations" (2020), 17 C.P.L.R.
• Eloïse Gratton and Andy Nagy, When is it legal to repurpose publicly available information for commercial purposes? (2019),17 C.P.L.R.
• Antoine Guilmain et Eloïse Gratton, La protection des renseignements personnels dans le secteur privé au Québec: rétrospectives et perspectives, Développements récents en droit de la vie privée, Vol. 465, Thomson Reuters Canada Limitée, 2019.
• Bradley Freedman, Eloïse Gratton and Elisa Henry, Frequently Asked Questions - PIPEDA’s Security Breach Obligations, Canadian Privacy Law Review, (2019), 16 C.P.L.R. (April 2019).
• Eloise Gratton and Vinay Desai, Public Facebook Profiles Not Equivalent to Public Information under PIPEDA, Canadian Corporate Counsel, Vol, 27, No. 5 (June/July 2018).
• Eloïse Gratton and François Joli-coeur,ETHI Committee Prepares for GDPR Adequacy Assessment in New Report on PIPEDA, Canadian Privacy Law Review, Vol. 15 No 6 (May 2018).
• Eloïse Gratton and François Joli-coeur, OPC Report Asserts PIPEDA Protections are Similar to EU “Right to be Forgotten”, Canadian Privacy Law Review, Vol.15 no. 5, April 2018.
• Eloise Gratton and François Joli-coeur, New Committee Report on CASL Highlights Need for Clarification and Education, Canadian Privacy Law Review, LexisNexis, Vol. 15, No. 4 (March 2018).
• Eloïse Gratton and Vinay Desai, SCC Recognizes Expectation of Privacy in Text Message Conversations, Internet and E-commerce Law in Canada, LexisNexis, Vol. 18, No. 10 (February 2018)
• Eloïse Gratton and Vinay Desai, SCC Recognizes Expectation of Privacy in Text Message Conversations, Canadian Privacy Law Review, LexisNexis, Vol. 15, No 3 (February 2018). 
• Eloïse Gratton et Julien Boudreault, Google Inc c Equustek Solutions Inc: Les injonctions d’application mondiale visant le retrait de résultats de recherche : un nouveau remède d’exception en matière de propriété intellectuelle, Les Cahiers de la Propriété Intellectuelle, Vol. 30, No 1, janvier 2018.   HTML
• Eloïse Gratton and François Joli-coeur, Uncertainty following two Canadian rulings on forum selection clauses, Leading Internet Case Law, Cecile Park Media, December 2017.   PDF
• Eloïse Gratton and Joe Abdul-Massih, Supreme Court of Canada Confirms in Douez v. Facebook That a Business Cannot Contract Out of Local Privacy Law, Canadian Privacy Law Review, (2017), 14 C.P.L.R. (September 2017).  
• Eloïse Gratton and Christopher Maughan, Superior Court of Quebec Authorizes Privacy Class Action in Zuckerman v. Target Corporation, Canadian Privacy Law Review, 14 C.P.L.R. (May 2017).  
• Eloise Gratton and Jules Polonetsky, Droit À L’Oubli: Canadian Perspective on the Global ‘Right to Be Forgotten’ Debate, Colorado Technology Law Journal, Vol 15, Issue 2 (2017).
• Eloïse Gratton and Raphaël Girard, Important Recommendations from the Québec Privacy Commissioner on the Protection of Personal Information, (2017), 14 C.P.L.R. (March 2017)
• Eloïse Gratton and Raphaël Girard, Using Social Insurance Numbers for Identification Purposes: Canadian Perspective on Legal and Privacy Risks, Trusts and Trustees, Oxford Journals, Oxford University Press, U.K., 2017.
• Eloïse Gratton and  Brad Freedman, CASL Enforcement Decision - Sending Messages Without Consent, (2017), 14 C.P.L.R. (January 2017)  
• Eloise Gratton, Publicité ciblée et défis en matière de protection de renseignements personnels, Le consommateur numérique : une protection à la hauteur de la confiance?, Éditions Yvon Blais, automne 2016. 
• Eloïse Gratton, Privacy best practices for mHealth apps, Health Legal, U.K., Octobre 2016. PDF
• Eloïse Gratton, Right to be forgotten v. the public interest, Lawyers Weekly, July 8, 2016
• Eloïse Gratton, Special to the Financial Post, Forget about bringing the ‘right to be forgotten’ to Canada, Financial Post, May 9, 2016.
• Eloïse Gratton, Canadian Supreme Court to rule in territoriality principle, Ramifications for extraterritorial applicability of privacy laws, Data Protection Law & Policy, Strategic Analysis by DataGuidance, March 2016, Volume 13, Issue 03. 
• Eloise Gratton, Ontario Court Recognizes Existence of New  "Revenge Porn" Privacy Tort, BLG, January 28, 2016.
• Eloïse Gratton, Five Common Mistakes Made in Drafting Website Privacy Policies, Internet and E-Commerce Law in Canada, LexisNexis, Volume 16, Number 4, August 2015.
• Online Access to Court Decisions and Privacy Implications, Canadian Privacy Law Review, Volume 12, Number 8, LexisNexis, July 2015.
• New Requirements Of The Digital Privacy Act (Bill S-4), Canadian Corporate Counsel, Canada Law Book (a division of Thomson Reuters Canada Ltd.), June 2015.
• Canadian Legal Requirements for Online Behavioral Marketing, U.K., DataGuidance, June 2015.
• Health-Tracking Bracelets and Privacy Issues, Canadian Privacy Law Review, Vo. 12, Number 4, LexisNexis, March 2015.
• Canadian Telcos and Banks Subject to the Quebec Privacy Law, Canadian Privacy Law Review, Vo. 12, Number 1, LexisNexis, December 2014.
• Bris de sécurité informationnelle : Étapes à suivre et gestion des risques, Développements récents, Les 20 ans de la Loi sur la Protection des Renseignements Personnels dans le Secteur Privé, Formation continue du Barreau du Québec, Éditions Yvon Blais, 392, décembre 2014 (co-author with Frédérick Néron) HTML
• Security Breach Involving Personal Information: What Type of Harm Can Lead to Damages Being Awarded?, Canadian Privacy Law Review, Volume 11, Number 12, 2014. (co-author with Emmanuelle Saucier)
• Privacy, Trusts and Cross-Border Transfers of Personal Information: The Quebec Perspective, Dalhousie Law Journal, 37, No. 1, 2014. (co-author with Pierre-Christian Hoffman)
• Eloïse Gratton and Christian Abouchaker, Limited Protection of Dependents’ Personal Information in Group Insurance Matters, Canadian Privacy Law Review, Vol 11., No 11, October 2014, Lexis Nexis.
• Développements récents en vie privée, Les Cahiers de Propriété Intellectuelle, Carswell, Vol. 26, no 2 (co-author with Emmanuelle Saucier).
• Éloïse Gratton, Q. When is adequacy never adequate? A. When Quebec’s data protection law is considered ‘inadequate’ for Europe, Nymity, Privacy Interviews with Experts, July 2014, PDF
• Key Differences between US and Canadian Anti-Spam Laws, Canadian Privacy Law Review, LexisNexis, Vol. 11 no 6, May 2014 (co-author with Sharon Groom).
• Eloise Gratton and Patrick Gingras, Accéder, ou ne pas accéder au matériel informatique de son employé, telle est la question, Les développements récents en droit du travail (2014) du Barreau du Québec, Yvon Blais. HTML
• Gaining Consent (New Anti-Spam Law), Canadian Underwriter, April 1, 2014.
• Eloise Gratton, Damages Awards for Privacy Violations Are on the Rise, Canadian Privacy Law Review, Vo. 11, Number 2, LexisNexis, January 2014.
• Eloise Gratton, Managing Privacy Breaches, Canadian Underwriter, December 2013, p. 54 and following.
• Eloise Gratton and George Waggott, Union free expression rights trump privacy concerns: Alberta PIPA unconstitutional , November 2013. HTML
• Eloise Gratton and David Young, Privacy laws are too broad – Alberta statute ruled unconstitutional, November 2013. HTML
• Eloise Gratton, Commentaire sur la décision Images Turbo inc. c. Marquis : Les critères pertinents pour décider de l’admissibilité en preuve de courriels personnels d’un employé sur un Blackberry fourni par son employeur, Thomson Reuters (Yvon Blais), Repères, August 2013.
• Eloise Gratton, Authorization of a Class Action for Privacy Violations Granted in Quebec, Canadian Privacy Law Review, LexisNexis, Vol. 10, No 10, September 2013.
• Eloise Gratton, If Personal Information is Privacy's Gatekeeper, then Risk of Harm is the Key: A proposed method for determining what counts as personal information, Albany Law Journal of Science & Technology, Vol. 24, No. 1, 2013. PDF
• Eloise Gratton, Reforming PIPEDA with Stronger Enforcement Powers, Mandatory Breach Notification and Accountability Obligations, Canadian Privacy Law Review, LexisNexis, Volume 10, Number 7, June 2013.
• Eloise Gratton, Security Breach Notification Soon Becoming Mandatory in Canada, Canadian Privacy Law Review, LexisNexis, Volume 10, Number 6, May 2013.
• Eloise Gratton, Privacy Law in Quebec – Substantially Similar but Different? Nymity, Privacy Interviews with Experts, February 2013.
• Eloise Gratton, Qu’est-ce qu’un renseignement personnel? , Technologies de l’information En bref, No.3, Éditions Yvon Blais, January 2013.
• Eloise Gratton, Dealing with Canadian and Quebec Legal Requirements in the Context of Trans-border Transfers of Personal Information and Cloud Computing Services , Développements récents en droit de l’accès à l’information et de la protection des renseignements personnels, Les 30 ans de la Commission d’Accès à l’Information, Volume 358, Éditions Yvon Blais, November 2012.
• Eloise Gratton, Quebecers protected from unwanted email marketing , The Gazette, April 20, 2012.
• Eloise Gratton, Opinion: Quebec should amend its private sector data protection law, The Gazette, October 6, 2011.
• Eloise Gratton, Web 2.0: les limites de la libre expression., Magazine Premium, Les Affaires, May-June 2011, p. 72.
• Eloise Gratton, What Damages Can Be Claimed Pursuant to the PIPEDA by the Victims of Breach of Privacy? , Canadian Privacy Law Review, Volume 8, Number 3, February 2011.
• Eloise Gratton, Email Marketing Might be a Casualty on the Anti-spam Battlefield, The Gazette, January 27, 2011.
• Eloise Gratton, Employees should watch what they Tweet, The Gazette, December 8, 2010.
• Eloise Gratton, Personalization, Analytics, and Sponsored Services: The Challenges of Applying PIPEDA to Online Tracking and Profiling Activities , Canadian Journal of Law and Technology, Thompson-Carswell, November 2010.
• Eloise Gratton, Web 2.0 et l'obligation de loyauté de l'employé au Québec , Les Cahiers de Propriété Intellectuelle, Carswell, Volume 22, No 3, October 2010. HTML
• Eloise Gratton, Location-based services raise new privacy concerns, The Gazette, September 30, 2010.
• Eloise Gratton, Bruce McWilliam and Cindy Wan Canadian Legal Requirements for Electronic Marketing, International Privacy Guide, Thomson Reuters, vol. 2, 2010.
• Eloise Gratton, Bruce McWilliam and Cindy Wan, Canadian Requirements for Electronic Monitoring in the Workplace, International Privacy Guide, Thomson Reuters, vol. 3, 2010.
• Eloise Gratton, Comments, The Challenges of Applying PIPEDA to Online Tracking and Profiling, Canadian Privacy Commissioner Consultation Online Tracking Profiling and Targeting of Consumers by Business, April 2010.
• Eloise Gratton and Vincent Gautrais, Mobile Analytics and Privacy: Addressing Industry Needs While Protecting User Rights, Privacy White Paper, Neuralitic, February 2010.
• Eloise Gratton, Bruce McWilliam and Cindy Wan, International Transfers of Personal Data, Treatment of Personal Data Transfers in the Americas: Canada, International Privacy Guide, Thomson Reuters, vol. 1, 2009
• Eloise Can Quebec Employers Search OSNs for Employee-related Information?, Comments published in the PrivacyScan magazine, March 2009.
• Eloise Gratton, U.S. ruling ignores Canadian Internet users' privacy rights, The Lawyers Weekly, Information Technology Section, LexisNexis, Vol. 28, No. 20, September 26, 2008.
• Eloise Gratton, Aiding-and Abetting Liability Exposure of Affiliate Program Service Providers Under the New U.S. Internet Gambling Law, Journal of Internet Law, Aspen Publishing, Volume 10, Number 12, June 2007.
• Eloise Gratton, The Legality of Use of Video Surveillance by Quebec Employers, Canadian Privacy Law Review, Vol. 4, Number 6, LexisNexis, March 2007. PDF
• Eloise Gratton, Limiting the Liability Exposure Resulting From Security Breaches in Quebec, Canadian Privacy Law Review, Vol. 4, Number 4, LexisNexis, January 2007.
• Eloise Gratton, Marketers’ Privacy Liability: Review of Canada’s Federal Privacy Law, Advertising & Marketing Bulletin, McMillan LLP, December 2006. PDF
• Eloise Gratton,Privacy Liability in Business Transactions: The Alberta “Builders” Case and the Different Canadian Privacy Regimes, Canadian Privacy Law Review, Vol. 4, Number 3, LexisNexis, December 2006.
• Eloise Gratton, Business Transaction Exception Not Universal, The Lawyers Weekly, Information Technology Section, Vol. 26, No 27, LexisNexis, November 17, 2006.
• Eloise Gratton, Comparative Privacy: The Quebec Situation on Commercial Transactions, Video Surveillance and Security Breaches, Material submitted at the Tenth Annual Canadian IT Law Association Conference, October 2006, 18 pages.
• Eloise Gratton, La responsabilité des prestataires techniques au Québec, Lex Electronica, vol. 10, n°1, Winter 2005. PDF
• Eloise Gratton, Implementing the Canadian Privacy Framework When Doing Business Online, Material submitted at the Eight Annual Canadian IT Law Association Conference, October 2004, 10 pages.
• Eloise Gratton, Dealing with Unsolicited Commercial Emails: A Global Perspective, Journal of Internet Law, Aspen Publishing, June 2004. PDF
• Eloise Gratton, Mobile Marketing: How Should We Fight Wireless Spam?, ICFAI Press, Advertising Express, January 2004.
• Eloise Gratton, Should Patent Protection be Considered for Computer Software-related Innovations?, Computer Law Review & Technology Journal, Winter 2003. PDF
• Eloise Gratton, M-commerce: The Notion of Consumer Consent in Receiving Location-based Advertising, Canadian Journal of Law and Technology, CCH, Volume 2, Number 1, November 2002.
• Eloise Gratton, The Legality of online Privacy-Enhancing Technologies, Lex Electronica, International Journal of Information Technology Law, Vol. 7, Number 2, Spring 2002. PDF

Books

• Antoine Guilmain and Eloïse Gratton, "The Protection of Personal Information in the Private Sector in Québec: Looking Back and Thinking Forward", Editions Yvon Blais, 2020.
• Eloïse Gratton and Elisa Henry, Managing Privacy in a Connected World, LexisNexis, 2020.
• Eloïse Gratton and Lyndsay Wasser, Privacy in the Workplace, 4th ed., LexisNexis, 2017.
• Eloïse Gratton and Elisa Henry, Practical Guide to Internet and e-Commerce Law, LexisNexis, 2015.
• Eloise Gratton and Lyndsay Wasser, Privacy in the Workplace, 3rd edition, CCH Canada Ltd., 2014
• Eloise Gratton, Understanding Personal Information : Managing Privacy Risks, LexisNexis, 2013, 515 pages.
• Éloise Gratton, Internet and Wireless Privacy: Legal Guide to Global Business Practices, CCH Canada Ltd., 2003, 400 pages.

Book chapters

• Class Actions in Privacy Law, Chapter 3 "Uncertainties and lessons learned from data protection laws", co-authored with Lauren Phizicky and edited by Ignacio N. Cofone, Taylor & Francis Group (an Informa business), 2020. PDFHTML
• Éloise Gratton, "Privacy in the Online World" in Privacy in the Workplace, CCH Canada Ltd., 2nd edition, 2009.
• Éloise Gratton, "Unsolicited marketing email messages" in Digest of Commercial Laws of the World, Oceana Publications, Oxford University Press, New York, February 2009.
• Éloise Gratton, "Unsolicited marketing email messages" in World Online Business Law, Oceana Publications, Oxford University Press, New York, 2006 et 2009.
• Éloise Gratton, "SMS Marketing Regulations" in SMS Marketing for Mobile Generation, ICFAI University Press, 2005.
• Éloise Gratton, “Wireless spam: Ethical Issues” in Ethics in Wireless Advertising, ICFAI University Press, 2005

Guides

• Eloïse Gratton, Global Privacy Enforcement Report 2015, DataGuidance, U.K., 2015 (Contributor for Canada).
• Eloise Gratton, Practice Advisor, module on e-Commerce , author of precedents on website management, social media and online marketing, LexisNexis, 2013. (sole author of over 60 documents, practice notes and precedents)