Practice Area: Information, Data Security & Privacy

Privacy Rules Around Non-Disclosure of Administrative Records Declared Unconstitutional

· 7 min read

The Ontario Superior Court of Justice recently held that the Ontario Freedom of Information and Protection of Privacy Act (FIPPA) violates section 2(b) of the Canadian Charter of Rights and Freedoms (Charter), finding that it goes too far to protect the privacy of parties, witnesses and others in matters heard by the Ontario Human Rights Tribunal, Ontario Labour Relations Board and other statutory tribunals. Learn more in this FTR Now.

Ontario Implements Anti-Racism Act Regulations

· 2 min read

On April 20, 2018, the Ontario government filed regulations under the Anti-Racism Act, 2017 (ARA) setting out personal information that certain public sector organizations (PSOs) will be authorized or required to collect under the ARA for the purpose of eliminating systematic racism.

Workplace Law in Canada: A Primer

· 1 min read

This Guide provides American employers with an introduction to employment laws and regulations that affect businesses in Canada. It outlines an overview of the main differences between Canadian and U.S. workplace laws.

PIPEDA Breach of Security Safeguards Regulations Published

· 2 min read

Beginning November 1, 2018, the Personal Information Protection and Electronic Documents Act (PIPEDA) will require private sector organizations to provide notice to affected individuals and the federal Office of the Privacy Commissioner (OPC) when a security incident involving personal information results in a “real risk of significant harm.” The supporting regulations, Breach of Security Safeguards…

Mandatory Breach Notification Comes to Canada: What To Do About It

· 3 min read

It’s been a long time coming, but we finally know that mandatory breach notification is coming to Canada. Beginning November 1, 2018, the Personal Information Protection and Electronic Documents Act (PIPEDA) will require notification to affected individuals and the federal Privacy Commissioner when a security incident involving personal information results in a “real risk of significant…

IPC Provides Important Guidance on New PHIPA Annual Reporting Obligations

· 2 min read

Organizations which provide healthcare and are governed by the Personal Health Information Protection Act (PHIPA) should note that recent amendments to PHIPA require health information custodians (HICs) to file an annual report disclosing all security incidents involving theft, loss and unauthorized use or disclosure of personal health information to the Information and Privacy Commissioner. At…

The Right to Be Forgotten Comes to Canada

· 3 min read

On January 26, 2018, the Office of the Privacy Commissioner of Canada issued a new position on the protection of online reputation. In doing so the OPC recognized a right to have personal information de-indexed from search engine results if it is inaccurate, incomplete or out-of-date. Although the position is in draft, is nonetheless of…

Federal Government Consults on PIPEDA Data Breach Regulations

· 2 min read

On March 4, 2016, the federal government posted Data Breach Notification and Reporting Regulations (Regulations) for public discussion. Amendments to the Personal Information Protection and Electronic Documents Act (PIPEDA) enacted by the Digital Privacy Act (Bill S-4) will, upon proclamation, require private sector organizations to notify the public in circumstances where security safeguards involving their…