De-identification Of Personal Information Under The Proposed Consumer Privacy Protection Act

On March 19, 2015, the United States District Court in the District of Minnesota gave preliminary approval to a proposed settlement for the December 2013 data breach suffered by Target Corporation.

Federal and provincial privacy regulators have concluded a multi-year investigation into OpenAI's data practices, finding contraventions of Canadian privacy legislation in how personal information was collected and used...

Canada's privacy regulator has released new draft guidance establishing comprehensive due diligence standards for organizations evaluating third-party service providers under PIPEDA. The framework introduces eleven best practices covering everything from data flow mapping and AI training data sourcing to vendor lock-in risks and ongoing monitoring obligations, signaling heightened expectations for privacy accountability in vendor relationships.

Since Canada's anti-spam legislation (CASL) was enacted in 2014, businesses have been faced with the challenge of keeping adequate records of their authority to send commercial electronic messages under CASL's various categories of express and implied consent.

The Canadian market is ripe with opportunities for U.S. companies seeking to expand beyond domestic borders. Before diving in, however, it can be helpful to have a basic understanding of Canada's legal system...

Canada's federal government has introduced Bill C-36, marking a significant departure from its predecessor Bill C-27 by unbundling AI regulation from privacy reform and establishing a new regulatory framework centered...

The Ontario government recently amended the Personal Health Information Protection Act (PHIPA) to include mandatory breach reporting.

Canada's proposed Bill C-36 would fundamentally transform private-sector privacy law by replacing PIPEDA with the Protecting Privacy and Consumer Data Act. Organizations face stricter data collection tests, new consent exceptions, explicit AI governance rules, and penalties reaching $25 million or 5% of global revenue for knowing violations.

These regulations, which include fines of up to $100,000CAD for non-compliance, will come into force on November 1, 2018.

Canada's proposed Bill C-36 introduces sweeping reforms to private sector privacy law, replacing PIPEDA with the Protecting Privacy and Consumer Data Act.

Effective September 8, 2026, Canada implemented retaliatory tariffs on certain U.S. goods in response to the initial 50% tariffs imposed by the US under Section 338 of the Tariff Act of 1930. To operationalize these measures, the Canada Border Services Agency (CBSA) issued Customs Notice 26-23, establishing binding administrative rules on how the surtax will be applied, calculated, and collected.

A regulatory shift now under consideration in Ontario could reshape how the province’s medical aesthetic clinics operate. The proposal, which would change how nurses are authorized to administer medical aesthetic services, invites a broader look at how Ontario currently regulates cosmetic injections and how the proposed changes would align the province more closely with the regulatory frameworks already in place elsewhere in Canada. While these procedures are often marketed as routine “spa” services, they remain medical acts that involve prescription products and carry clinical risks.

This Bulletin summarizes key regulatory developments impacting the payments sector in 2025 and looks ahead to 2026.

With Labour Day now behind us, Parliament Hill is gearing up for its September 21 return. Canada’s counter-tariffs on nearly $28 billion in American goods are now in force, and the United States has already escalated in response: President Trump has signed measures to ban certain Canadian alcohol, dairy-related products, molasses, non-alcoholic beer, motorcycles and mopeds from entering the U.S. market as of September 29, while modifying the list of Canadian goods subject to 50% tariffs effective September 15 and directing action to remove Canadian-origin products from U.S. government procurement schedules.

Under Order in Council 1358-2026, the Québec government authorizes, from September 7, 2026 to January 31, 2027, the Centre d'acquisitions gouvernementales (the “CAG”) to depart from the general principle that public calls for tenders must be open and without discrimination to foreign suppliers from jurisdictions bound by an intergovernmental agreement with Québec.

Canada has announced the imposition of new tariffs on US goods beginning on September 8, 2026. Canada’s retaliatory tariffs were introduced in response to US tariffs on Canadian goods that entered into force on August 22, 2026.

The Office of the Superintendent of Financial Institutions (OSFI) published its third quarterly release of the year on September 10, 2026, noting that the targeted adjustments made to its guidance were made with a view to supporting a resilient and competitive Canadian financial system.

On July 29, 2026, Health Canada announced that it had obtained a permanent injunction against a Québec-based company in connection with the sale of unauthorized injectable peptides in Canada. The announcement reflects Health Canada’s continued focus on peptide products and serves as a reminder that injectable peptides intended for human use are regulated as prescription drugs and are subject to Canada's drug regulatory framework.

On September 21, 2026, the federal government introduced Bill C-39 (the Building Canada Strong Act) for first reading – an omnibus bill that proposes significant amendments to the Canada Labour Code (the “Code”).

A new regulatory framework for measuring and monitoring the energy performance of Québec’s building stock took effect on July 8, 2026, under the Regulation respecting the mandatory reporting of the environmental performance of certain buildings (the “Regulation”).