Legal Authority and Consent in Generative AI: Ensuring Compliance and...

As businesses in Canada continue to uncover the potential of generative artificial intelligence (AI), understanding the legal underpinnings of authority and consent becomes paramount. This article explores these concepts within the framework of the Office of the Privacy Commissioner of Canada’s principles, providing actionable insights and practical examples to guide businesses in their compliance efforts. […]

Introduction to OPC’s Generative AI Principles: A Guide for Canadian...

In late 2023, the Office of the Privacy Commissioner of Canada (OPC) introduced a comprehensive set of principles aimed at guiding the responsible, trustworthy, and privacy-protective development and use of generative artificial intelligence (AI) technologies. This initiative reflects a proactive stance by Canadian privacy regulators to address the complex challenges and opportunities posed by the […]

Canada’s Artificial Intelligence and Data Act (AIDA) 2024: A Comprehensive...

Introduction to AIDA In a pivotal move to navigate the rapidly evolving landscape of artificial intelligence (AI), Canada introduced the Artificial Intelligence and Data Act (AIDA) as part of Bill C-27, the Digital Charter Implementation Act, 2022. Marking a significant stride towards a regulatory framework, AIDA ensures the safe and responsible development and deployment of […]

Bill C-26: New Cyber Security Obligations for Canadian Businesses Vital...

All Canadian businesses should be aware of the developments in Canadian cyber security law, as the scope of industries to which these new obligations apply is likely to expand over time. Read more:

July 26, 2021

Too Big to Fail: Recent Cybersecurity Incidents Highlight Critical Infrastructure...

Click here to view PDF version. As the COVID-19 pandemic and its fallout continues to challenge health care systems, supply chains, and essential services around the world, the growing cybersecurity threat of ransomware must be addressed by policy makers given its potential impact on already strained critical infrastructure networks. What is ransomware? Ransomware is a […]

June 25, 2021

More than Just a Stamp: Proposed Vaccine Passports Raise Privacy...

Click here to view PDF version. As the number of Canadians receiving COVID-19 vaccines continues to rise, vaccine passports are now sparking discussion as a means to return to “normal”.  However, privacy commissioners and ombudspersons across Canada have stressed that these proposed tools raise a host of privacy and data security concerns, many of which […]

Safe House? How Smart Home Devices Pose Digital Security Risks

Our increased focus on online connectivity has also created new cybersecurity risks regarding the unauthorized access and use of sensitive information. These threats are heightened by the fact that many Canadians were already vulnerable before the pandemic given their use of smart home devices.

October 30, 2020

Privacy Gets Pricey: Rising GDPR Fines and the Risks Facing...

Canadian companies doing business with partners based in the EU – and where personal data collection, use and/or disclosure could take place – cannot lose sight of the impact the General Data Protection Regulation (GDPR) may have on their operations, especially when it comes to the cost of non-compliance.

National COVID-19 App Available in Nova Scotia; Potential for Public...

Nova Scotia recently became the eighth province to onboard the federal government’s COVID-19 exposure notification application. Public health officials believe that if it is widely used across Canada, COVID Alert has the potential to provide an efficient way of tracing the virus. However, the introduction of this tracking technology into the national COVID-19 response presents new privacy issues for Canadians to consider.

August 4, 2020

Canada’s valuable COVID-19 research vulnerable to Russian, Chinese hacks

In late March, Canada’s Communications Security Establishment warned researchers across the country to secure their COVID-19 data because “sophisticated threat actors” were exploiting the chaos of the pandemic in an effort to steal critical vaccine research. However, there has been little to no discussion beyond the CSE’s repeated warnings as to just what is being done to protect the important work of our local health and science experts.