In the Undertaking announced today by the CRTC, Gap, Inc has agreed to pay a $200,000 fine and to come into full compliance with An Act to promote the efficiency and adaptability of the Canadian economy by regulating certain activities that discourage reliance on electronic means of carrying out commercial activities, and to amend the Canadian […]
Quebec’s new Bill 64 impacts 21 different laws in the province. The 2 data protection and privacy laws impacted the most are: 1) ACT RESPECTING THE PROTECTION OF PERSONAL INFORMATION IN THE PRIVATE SECTOR (PPIPS and 2) the ACT RESPECTING ACCESS TO DOCUMENTS HELD BY PUBLIC BODIES AND THE PROTECTION OF PERSONAL INFORMATION (PBPPI) Like […]
The Quebec ACT RESPECTING THE PROTECTION OF PERSONAL INFORMATION IN THE PRIVATE SECTOR was updated in 2007 on the Legis Quebec website. Bill 64 was passed on September 22, 2021. Sections 93 through 152 of Bill 64 detailed the changes to be made to the ACT RESPECTING THE PROTECTION OF PERSONAL INFORMATION IN THE PRIVATE SECTOR. […]
The CRTC is very good at communicating about CASL Enforcement. At least twice a year they present this type of update. I like their work in the botnet area and their commitment to make the internet a safer place for Canadians. In this period betweek April 1, 2021 and Septemeber 30, 2021 they sent out […]
New Rules for Consent in Canada – a deeper dive… Quebec recently passed Bill 64, changing the privacy and data protection landscape in Canada yet again. In this article we will address: Many businesses do not currently track and record consent for data processing. There has never been a need to do so, therefore most […]
During Paul Martin’s term as Prime Minister, the Government began the process of reducing electronic spam (email and SMS Text) in Canadian’s personal inboxes. Stephen Harper’s Government then carried the ball and in Dec 2010 the Canadian Anti Spam Legislation was passed and became law. During Paul Martin’s term as Prime Minister, the Government began […]
Until now, we have not really been required to implement practices or processes to track and record consent to use an individual’s personal data when conducting business. For the most part over the past 20 years, we collected and bought what we could and then “followed the technology” to determine what we could do with […]
During the past 6 years it has been beyond frustrating to watch little to nothing happen with our Canadian privacy laws, despite the constant and very public cry of our leading privacy experts such as Daniel Therrien, our Privacy Commissioner. Technology has certainly not stood still. PIPEDA was passed 20+ years ago (with little to […]
The new era of privacy & data protection has changed the rules of engagement for businesses who use personal information as part of their marketing outreach program. Thanks mainly to the General Data Protection Regulations (GDPR) in the EU and UK, we have shifted from a “we own their data” mentality to a “they own […]
We often hear comments like “The GDPR is a consent based law” and ” Under the GDPR you must have consent”, yet nothing could be further from the truth. Let’s unpack where consent fits under the GDPR. As consumers we have been trained to not trust most organizations with our personal data. We know they […]