Procedural Power of Courts Not Constrained by PIPEDA

In Royal Bank of Canada v. Trang, the Supreme Court of Canada held that the Personal Information Protection and Electronic Documents Act (PIPEDA) does not interfere with the procedural powers of a court. The decision arose out of a situation in which past judicial interpretation and application of PIPEDA had impeded the ability of the…

Ten Incident Response Tips – Part 2

In Part 1 of this two-part series on data security incident response, we identified five “norms” to guide your incident response process…

Ten Incident Response Tips – Part 1

Responding to a data security incident is as much art as science. Whatever size your organization and whatever risks you face, you should have a detailed incident response plan to guide the efforts of a defined incident response team…

Supreme Court Affirms Supremacy of Solicitor-Client Privilege

In Alberta (Information and Privacy Commissioner) v. University of Calgary, a majority of the Supreme Court of Canada (with two justices partially concurring) affirmed that the University of Calgary was justified in its refusal to produce certain documents over which it had claimed solicitor-client privilege to the Information and Privacy Commissioner of Alberta (Commissioner). The…