The Consumer Privacy Protection Act (CPPA) will make substantial changes to Canada’s privacy law. In this post I examine the significant proposed changes to the law as they relate to personal information that has been “de-identified”.
On November 16, 2020, the federal government introduced the Consumer Privacy Protection Act (“CPPA”), which, if enacted, will provide organizations with greater clarity regarding their obligations when engaging third party service providers to process personal information outside Canada. In this blog, we explore how the core concepts of cross-border transfers of personal information for processing are evolving after a brief period of major uncertainty.
We may expect to see a shift towards stronger, more protective privacy laws in the near future in the Personal Information Protection and Electronic Documents Act, the Alberta PIPA and the British Columbia PIPA.