data protection

Joint investigation by the Privacy Commissioner of Canada and the Information and Privacy Commissioner for British Columbia – BC company failed to comply with privacy laws

December 2, 2019 Christina Catenacci Human Resources, Privacy and Security, Training and Development, 0

A recent report concluded that AIQ, a British Columbia company, failed to meet its obligations under Canadian privacy laws when it used and disclosed the personal information of millions of voters in British Columbia, the United States, and the United Kingdom.

AggregateIQ Data Services (AIQ), data protection, employment law, Personal Information Protection Act, Personal Information Protection and Electronic Documents Act, privacy laws, security measures

Privacy Commissioner of Canada’s consent guidelines are in effect as of January 1, 2019

January 7, 2019 Christina Catenacci Employee Relations, Human Resources, 0

Last spring, the Office of the Privacy Commissioner of Canada released an important guidance document concerning meaningful consent. It now applies as of January 1, 2019.

consent, consent process, data protection, employment law, meaningful consent, Personal Information Protection and Electronic Documents Act, PIPEDA, privacy

Privacy Commissioner of Canada provides guidance on meaningful consent

June 4, 2018 Christina Catenacci Human Resources, Privacy and Security

Obtaining meaningful consent represents a significant responsibility, and the Privacy Commissioner has created a checklist to assist organizations in achieving compliance.

consent process, data protection, employment law, Guidelines for obtaining meaningful consent, meaningful consent, Personal Information Protection and Electronic Documents Act, PIPEDA, privacy, privacy policy

Privacy Commissioner of Canada provides guidance on inappropriate data practices

June 4, 2018 Christina Catenacci Human Resources, Privacy and Security

The Privacy Commissioner has outlined several “No-Go Zones”, and organizations are recommended to avoid collection, use and disclosure of personal information for these inappropriate purposes.

audio surveillance, collect personal information, collecting data, data breaches, data collection, data disclosure, data practices, data protection, employee screening, employment law, inappropriate data practices, personal information, Personal Information Protection and Electronic Documents Act, PIPEDA, privacy, profiling, social media, surveillance, video surveillance

The European Union’s General Data Protection Regulation (GDPR) took effect on May 25, 2018 – what does this mean for Canadian organizations?

June 4, 2018 Christina Catenacci Employee Relations, HR Policies and Procedures, Human Resources, Privacy and Security

When determining whether the GDPR applies to our organization, it is important to ask questions such as, “Do I have an establishment in the EU?”, “Do I offer goods or services to individuals in the EU?”, and “Do I monitor the behaviour of individuals in the EU?”

behaviour monitoring, company data breaches, data breaches, data collection, data protection, data security, Employee privacy, employment law, GDPR, General Data Protection Regulation, personal data breach, Personal Information Protection and Electronic Documents Act, PIPEDA, privacy laws, right to be forgotten