Jeremie Wyatt

Dec 12, 2023 | lexblog.com | Imran Ahmad |John M. Cassell |Suzie Suliman |Jeremie Wyatt

In our previous post, we discussed specific considerations for common boilerplate provisions in data processing agreements (DPAs). Due to the sensitivity of data transfers and privacy laws, DPAs require careful drafting to ensure the data processor complies with appropriate privacy obligations and is responsible for any non-compliance. This post takes a closer look at DPA-specific obligations relating to the data processing itself.

Dec 4, 2023 | lexblog.com | Imran Ahmad |John M. Cassell |Suzie Suliman |Jeremie Wyatt

Modern businesses collect and process personal information about their customers and employees for the benefit of their business – these benefits include identifying opportunities to enhance their products or services, streamlining operations, reducing costs or maximizing profits. Processing such data is often outsourced to a third-party data processing service provider.

Oct 5, 2023 | lexblog.com | Imran Ahmad |Véronique Barry |Roxanne Caron |Jeremie Wyatt

With most provisions of the Act to modernize legislative provisions as regards the protection of personal information (Act 25) having just come into effect on September 22, public bodies and enterprises (organizations) will now need to conduct privacy impact assessments (PIA) during various projects that involve personal information.