Canada: Cybersecurity

Let’s start with the basics. Most client security questionnaires are not trying to turn your firm into a technology company. They are trying to understand whether you have the fundamentals in place.

On June 15, 2026, Evan Solomon, the Minister of Artificial Intelligence and Digital Innovation, introduced Bill C-36,[1] which enacts the Protecting Privacy and Consumer Data Act (PPCDA), marking the third attempt in six years to reform Canada’s federal private-sector privacy law after two previous bills died on the Order Paper. Like 2020’s Bill C-11 and 2022’s Bill C-27 before it, Bill C-36 replaces Part 1 of the Personal Information Protection and Electronic Documents Act (PIPEDA) with new legislation (the PPCDA) that codifies PIPEDA’s principles.

The Office of the Privacy Commissioner of Canada (“OPC”) recently released a significant report concerning widespread unauthorized access to taxpayer information held by the CRA.

Les tribunaux canadiens adoptent une approche de plus en plus restrictive envers les actions collectives pour incidents de confidentialité, particulièrement en Ontario et en Alberta, tandis que de nouvelles tendances...

Ontario is the latest province to make updates to its public-sector privacy and freedom of information legislation. Ontario’s Bill 97, Plan to Protect Ontario Act (Budget Measures), 2026...

L'Ontario modernise sa législation en matière de protection de la vie privée et d'accès à l'information dans le secteur public par le biais du projet de loi 97.

The fintech industry in Canada is experiencing a transformative moment with the introduction of the Retail Payments Activities Act, creating new opportunities for innovation and investment. Visa's Jay Dorey and Torys' Brigitte Goulard explore how regulatory clarity is reshaping the landscape, from AI-powered fraud detection to emerging agentic commerce. Discover which verticals are poised for explosive growth and how fintechs are leveraging new tools to serve previously underserved markets.

This AI Insights Quick Read series examines a growing risk for innovation-driven businesses: how routine generative AI use can weaken confidentiality, compromise legal review...

Canadian organizations face intensifying regulatory enforcement, shifting market conditions, and accelerating technology risks in 2026. This comprehensive outlook examines critical developments across private equity, competition law, power infrastructure, public procurement, tax policy, and technology governance that will shape strategic decisions in the year ahead.