Canada: Data Protection

Customer contracts are about expectation management. They define what is being delivered, what is being paid, how data is handled, and what happens when reality does not align with the plan.

Les tribunaux canadiens adoptent une approche de plus en plus restrictive envers les actions collectives pour incidents de confidentialité, particulièrement en Ontario et en Alberta, tandis que de nouvelles tendances...

Legal privilege can protect sensitive information during data breach responses, but simply involving counsel may not be enough. Recent court decisions reveal when privilege applies to breach investigations and what companies must do to preserve these protections.

Your organization is almost certainly using artificial intelligence. Whether it is a customer service chatbot on your website, an automated hiring screener in your HR department...

BC’s Intimate Images Protection Act (“IIPA”) gives recourse to individuals who experience the non-consensual sharing of their intimate images.

Canadian privacy laws require organizations to notify privacy commissioners and affected individuals when breaches meet specific thresholds, but the process varies across federal and provincial jurisdictions. Understanding when notification is mandatory, what constitutes a "real risk of significant harm," and how to navigate the requirements under PIPEDA, Alberta's PIPA, and Quebec's Law 25 is essential for compliance.

On Feb. 18, 2026, the Court of Appeal for British Columbia issued its decision, Clearview AI Inc v British Columbia (Information and Privacy Commissioner)...

The Commission d'accès à l'information (CAI) will not be publishing an English version of guidance that it provided in January 2026 on the prevention of confidentiality incidents by private organizations.

The British Columbia Court of Appeal has clarified the temporal scope of amendments to the Business Practices and Consumer Protection Act that prohibit mandatory arbitration clauses in consumer contracts. In Vandenbosch v. Rogers Communications Canada Inc., the court determined whether these amendments apply to disputes arising from events that occurred before the legislation came into force on March 31, 2025.