Canada: Data Protection

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
Privacy, Data Protection, And Cybersecurity: What Foreign Companies Must Consider Before Entering The Canadian Market
Foreign companies entering Canada often assume their existing privacy programs designed for GDPR or CCPA compliance can simply extend to Canadian operations, but Canada's legal requirements demand targeted modifications. This comprehensive guide examines Canada's private sector privacy legislation, breach reporting obligations, AI governance expectations, and anti-spam regulations that businesses must navigate before launching in the Canadian market.
Canada Privacy
MT
Miller Thomson LLP
Article
Privacy Class Actions: The Professional Information Exception Under Scrutiny In Québec
A Quebec Superior Court has authorized a class action examining whether professional contact information collected by business intelligence platform Apollo.io falls within Quebec privacy law's "professional information" exception. The case raises critical questions about the boundaries between protected personal data and exempted professional information in today's digital workplace, particularly regarding cell phone numbers, LinkedIn profiles, and algorithmic profiling outputs.
Canada Privacy
OH
Osler, Hoskin & Harcourt LLP
Article
Fasken’s Noteworthy News: Privacy & Cybersecurity In Canada, The US, And The EU (September 2026)
The guidance emphasizes that organizations remain accountable for personal information under their control, including where it is collected, used, disclosed or processed by a third party, and should conduct privacy due diligence to identify compliance risks, inform contractual protections and demonstrate accountability. The OPC is accepting comments on the guidance until December 4, 2026.
Canada Privacy
F
Fasken
Article
Actionable Privacy Practice Takeaways From The Joint Investigation Of OpenAI: A Practical Compliance Guide For AI Developers
Canadian privacy regulators have issued comprehensive findings on OpenAI's ChatGPT practices, establishing new compliance expectations for AI developers across consent requirements, data accuracy, and individual rights. The joint investigation by federal and provincial privacy commissioners reveals critical divergences in how different jurisdictions interpret consent for training data, while providing practical guidance on implementing access, correction, and deletion rights within the technical constraints
Canada Privacy
GW
Gowling WLG
Article
Les Actualités À Noter Selon Fasken : Protection Des Renseignements Personnels Et Cybersécurité Au Canada, Aux États-Unis Et Dans L’Union Européenne (Juillet 2026)
Ce bulletin mensuel a été préparé par le groupe Protection des renseignements confidentiels, vie privée et cybersécurité de Fasken pour vous présenter les actualités et les développements récents qui ont attiré notre attention. Si vous avez des questions sur l’un des sujets abordés dans ce bulletin, communiquez avec l’un des membres de ce groupe, qui se fera un plaisir de vous aider.
Canada Privacy
FF
Fasken (French)
Article
Canada’s 2026 AI Strategy: What Businesses Need To Know
Canada's National Artificial Intelligence Strategy marks a significant shift in federal AI policy, moving away from standalone legislation toward a comprehensive framework that emphasizes privacy reform, data sovereignty, and business adoption. The Strategy outlines six interconnected pillars designed to position Canada as a global AI leader while addressing regulatory gaps through existing legal frameworks and new policy tools.
Canada Technology
AB
Aird & Berlis LLP
Article
Le nouveau régulateur canadien de la protection de la vie privée : pourquoi le projet de loi C‑36 change la donne
Canada's proposed federal privacy reform would integrate privacy oversight into a broader online harms prevention mandate through a new Digital Safety and Data Protection Commission. This consolidated regulator would wield expanded enforcement powers, including binding orders and substantial fines, while overseeing both privacy protection and digital safety legislation.
Canada Technology
MT
McCarthy Tétrault LLP
See more