As someone practicing for several years in the field of privacy
law, I am asked to provide advice and to answer a variety of
questions from both clients and other legal professionals on a
myriad of privacy, access to information, and cyber liability
related topics. The purpose of this article is to provide insight
into some of the frequently asked questions. The questions
outlined below are intended to address the concerns of a commercial
entity or business (an organization) who is subject to the
provisions of the Personal Information Protection and
Electronic Documents Act, S.C. 2000 c. 5 (PIPEDA).
Can an organization transfer the personal information
that it has collected from its customers to a third-party
organization outside of the jurisdiction, for processing or
storage?
