Legal Authority and Consent in Generative AI: Ensuring Compliance and...

As businesses in Canada continue to uncover the potential of generative artificial intelligence (AI), understanding the legal underpinnings of authority and consent becomes paramount. This article explores these concepts within the framework of the Office of the Privacy Commissioner of Canada’s principles, providing actionable insights and practical examples to guide businesses in their compliance efforts. […]

Privacy Law and PIPEDA: Common questions asked by businesses

As someone practicing for several years in the field of privacy law, I am asked to provide advice and to answer a variety of questions from both clients and other legal professionals on a myriad of privacy, access to information, and cyber liability related topics. The purpose of this article is to provide insight into […]

Introduction to OPC’s Generative AI Principles: A Guide for Canadian...

In late 2023, the Office of the Privacy Commissioner of Canada (OPC) introduced a comprehensive set of principles aimed at guiding the responsible, trustworthy, and privacy-protective development and use of generative artificial intelligence (AI) technologies. This initiative reflects a proactive stance by Canadian privacy regulators to address the complex challenges and opportunities posed by the […]

Canada’s Artificial Intelligence and Data Act (AIDA) 2024: A Comprehensive...

Introduction to AIDA In a pivotal move to navigate the rapidly evolving landscape of artificial intelligence (AI), Canada introduced the Artificial Intelligence and Data Act (AIDA) as part of Bill C-27, the Digital Charter Implementation Act, 2022. Marking a significant stride towards a regulatory framework, AIDA ensures the safe and responsible development and deployment of […]

Changes to privacy laws are coming: How to prepare your...

Changes to privacy laws are coming: How to prepare your organization for Bill C-27 (Digital Charter Implementation Act, 2022).

July 26, 2021

Too Big to Fail: Recent Cybersecurity Incidents Highlight Critical Infrastructure...

Click here to view PDF version. As the COVID-19 pandemic and its fallout continues to challenge health care systems, supply chains, and essential services around the world, the growing cybersecurity threat of ransomware must be addressed by policy makers given its potential impact on already strained critical infrastructure networks. What is ransomware? Ransomware is a […]

June 25, 2021

More than Just a Stamp: Proposed Vaccine Passports Raise Privacy...

Click here to view PDF version. As the number of Canadians receiving COVID-19 vaccines continues to rise, vaccine passports are now sparking discussion as a means to return to “normal”.  However, privacy commissioners and ombudspersons across Canada have stressed that these proposed tools raise a host of privacy and data security concerns, many of which […]

Hands Off: Appeal Court Decision Strikes Border Agents’ Warrantless Device...

Travelers crossing into Canada must provide their device passwords for Border Security Officers upon request in order to facilitate searches. This creates significant privacy implications for all travelers but lawyers, in particular, should be aware of the scope of the Canadian Border Services Agency’s searching authority, which could impact their duty of confidentiality and solicitor-client privilege.

The Use of Wearable Technology Among Athletes and its Potential...

Professional sport has officially arrived in Halifax. The Halifax Hurricanes have been competing in the National Basketball League of Canada since late-2015; the HFX Wanderers almost won the Canadian Premier League in its second season; rumours of a Canadian Football League team coming to Halifax continue to swirl[1]; and the Halifax Thunderbirds were at the […]

December 8, 2020

An “Adequate” Makeover? Canadian Privacy Law gets a 21st Century Upgrade

On November 17, 2020, the federal government introduced Bill C-11, the Digital Charter Implementation Act, 2020 (DCIA), which, if passed, will significantly reshape the Canadian privacy landscape. Organizations handling personal information must consider how the CPPA could impact their operations and take steps to implement the necessary data protection procedures to meet their obligations under the new law.