Canada: Data Protection

In effect across the EU since January 17, 2025, the Digital Operational Resilience Act ("DORA") aims to enhance the digital resilience of financial entities to withstand and respond to ICT-related disruptions.

This blog explores the essential role of privacy policies in Canadian business, emphasizing their legal and strategic importance under laws like PIPEDA and the upcoming CPPA.

On June 3, the Canadian government tabled Bill C-2 in Parliament, called "An Act respecting certain measures relating to the security of the border between Canada and the United States and respecting other related security measures" but with a short title of "Strong Borders Act".

À mesure que le paysage numérique de l'Union européenne (« UE ») évolue, la complexité de son cadre réglementaire suit la même trajectoire.

Le bulletin Tendances actuelles de McCarthy Tétrault présente chaque mois les dernières tendances du marché pour vous tenir informé(e) des développements pouvant avoir une incidence sur vos activités.

Previously McMillan's Privacy and Data Protection Group reported on Bill C-26, which died on the Order Paper when Parliament was prorogued in January 2025 (read our in-depth analysis of Bill – C-26 here).

The Federal Court of Appeal ("FCA") released a landmark ruling on September 9, 2024 in its decision of Privacy Commissioner of Canada v. Facebook, Inc., 2024 FCA 140.

There are two distinct federal privacy laws in Canada: the Privacy Act, which applies to the federal government, and the Personal Information Protection and Electronic Documents Act ("PIPEDA")...

The past year has introduced some uncertainty for institutional defendants facing privacy breach class actions in Canada. While Ontario's Court of Appeal has been consistent in its approach to class actions...