Privacy and Data Management

Mandatory new Canadian data breach obligations expected to take effect in 2018

Strict new Canadian security breach notification requirements are expected to be finalized and come into force during 2018. The requirements will...

Privacy a primary concern in 2017

Sophisticated cybersecurity threats, high-profile data incidents, and an explosion in the volume of data analytics initiatives have resulted in...

Consumer data: Lessons learned from the security incident trenches

All businesses that collect and maintain consumer data are facing a rapidly evolving and sophisticated array of security threats to their data...

Not so happy New Year: Ontario Rewards Points Legislation coming into force January 1, 2018

The wait is now over, as the Ontario government recently published Ontario Regulation 388/17 (the Regulation), which will come into force on January...

CSA issues guidance on cybersecurity and social media practices for registered firms

New guidance on cybersecurity and social media practices for registered dealers, advisors and investment fund managers was recently issued by the...

Confidentiality and misconduct considerations related to employee workplace recordings

In Hart v. Parrish & Heimbecker, Limited [2017] MBQB 68, the trial judge considered an employee’s secret recordings with senior management in...

Canadian government suspends CASL private right of action

The Canadian federal government has announced that it has suspended the coming into force of the private right of action under Canada’s anti-spam...

The first 48 hours: responding to a data breach

Your organization’s initial response to a data breach is critical in determining the long-term impact the incident will have on your business.

Corporate governance and data issues

The immediate steps you take after a data breach can set the tone for the response and influence how smoothly your organization can move forward from...

Up & coming issues in privacy class actions

A cybersecurity strategy must be in place to prioritize and protect the organization’s critical data and information systems and to manage the risk...