2021/2022 Cyber/Data Outlook: Anticipated Changes To Privacy Laws In Canada

Privacy compliance was once a straightforward process of checking the right boxes — not much more than adequate consents and a privacy policy on a website — but that world no longer exists. We are in the midst of a global explosion of legislation governing data. With potential overlaps and even clashes between laws, as data flows grow more complex, organizations are now forced to navigate privacy legislation from multiple jurisdictions, different levels of government, and even industry-specific regulations and guidance, with increasingly harsh penalties for non-compliance.

Keeping up with what's happening in this changing environment will help you avoid the quicksand without relinquishing the legitimate business purposes for using data. The following article summarizes anticipated changes relating to privacy legislation, cross-border data transfers, and sensitive data requirements such as biometric data and automated decisions.