Resource Library

This article discusses EU Commission decision approving the EU-U.S. Data Privacy Framework (“EU-US DPF”) as a valid transfer mechanism for sharing personal data from European Economic Area countries (those in the EU plus Iceland, Liechtenstein and Norway) to the United States.

Canada's Bill C-27 updates Canada's federal private sector privacy law (PIPEDA), and re-works the Digital Charter Implementation Act (C-11). This article summarizes details of the new bill and highlights and compares certain provisions with C-11.

A sample terms of service agreement between an individual and a company concerning the use of the company's website. This agreement includes clauses for license grants, restrictions, user obligations, privacy, and postings.

Now that some of the hype and uncertainty around the Protection of Personal Information Act (POPIA) has settled, and data privacy and protection has become an integral part of our personal and professional lives, we can take some time to reflect on some of the aspects of data privacy legislation that are required for organisations to be compliant. No organisation operates in isolation, and organisations generally require some assistance or services from third parties in their day-to-day operations.

Learn about the implications of the decision by the Supreme Court of Illinois in Cothron v. White Castle System, Inc. (February 17, 2023), which determined that violations under the US Biometric Information Privacy Act (BIPA) accrue each time an individual’s biometric data is illegally scanned or transmitted.

Learn about certain provisions of Quebec's privacy protection act which come into force September 22, 2022 and a chcklist for organizations to prepare for compliance on governance, breach response, and with commercial transactions.