[rev_slider_vc alias="home1"]

Month: <span>December 2021</span>

New PI Rules in Canada, Part I – CEOs are Accountable for Personal Information

Quebec passed Bill 64 in September 2021, dramtically updating the Act Respecting the Protection of Personal Information in the Private Sector (“PPIPS”). Just as the California Consumer Privacy Act (2018) set a new National standard for the US, Quebec has set a new privacy standard for Canada. Most organizations who operate in Canada cannot have […]
Read more

Passwords: Are Words Better Than Random Letters?

Creating and managing strong passwords is a fundamental key for internet security, but remains a challenging task for many users who cannot break their bad habits of recycling the same password for multiple accounts. Because of these poor password security practices, attackers exploit them compromising personal and organizational security, which leads to more data breaches […]
Read more

The $200,000 Fine for the Gap – A Deeper Dive

In the Undertaking announced today by the CRTC, Gap, Inc has agreed to pay a $200,000 fine and to come into full compliance with An Act to promote the efficiency and adaptability of the Canadian economy by regulating certain activities that discourage reliance on electronic means of carrying out commercial activities, and to amend the Canadian […]
Read more

The Urgent Elements of Bill 64

Quebec’s new Bill 64 impacts 21 different laws in the province. The 2 data protection and privacy laws impacted the most are: 1) ACT RESPECTING THE PROTECTION OF PERSONAL INFORMATION IN THE PRIVATE SECTOR (PPIPS and 2) the ACT RESPECTING ACCESS TO DOCUMENTS HELD BY PUBLIC BODIES AND THE PROTECTION OF PERSONAL INFORMATION (PBPPI) Like […]
Read more

Quebec: Updated PPIPS

The Quebec ACT RESPECTING THE PROTECTION OF PERSONAL INFORMATION IN THE PRIVATE SECTOR was updated in 2007 on the Legis Quebec website. Bill 64 was passed on September 22, 2021. Sections 93 through 152 of Bill 64 detailed the changes to be made to the ACT RESPECTING THE PROTECTION OF PERSONAL INFORMATION IN THE PRIVATE SECTOR. […]
Read more

Standardization landscape for privacy: Part 1 — The NIST Privacy Framework

Standards and frameworks provide real benefits for privacy management. Standards are established norms to be applied consistently across organizations, while frameworks are a set of basic guidelines to be adapted to an organization’s needs. Both can help to fulfill compliance obligations, build trust, benchmark against industry best practices, support strategic planning and evaluation, enable global […]
Read more