Thought Leadership

On March 19, 2015, the United States District Court in the District of Minnesota gave preliminary approval to a proposed settlement for the December 2013 data breach suffered by Target Corporation.

Federal and provincial privacy regulators have concluded a multi-year investigation into OpenAI's data practices, finding contraventions of Canadian privacy legislation in how personal information was collected and used...

Since Canada's anti-spam legislation (CASL) was enacted in 2014, businesses have been faced with the challenge of keeping adequate records of their authority to send commercial electronic messages under CASL's various categories of express and implied consent.

The Canadian market is ripe with opportunities for U.S. companies seeking to expand beyond domestic borders. Before diving in, however, it can be helpful to have a basic understanding of Canada's legal system...

Canada's privacy regulator has released new draft guidance establishing comprehensive due diligence standards for organizations evaluating third-party service providers under PIPEDA. The framework introduces eleven best practices covering everything from data flow mapping and AI training data sourcing to vendor lock-in risks and ongoing monitoring obligations, signaling heightened expectations for privacy accountability in vendor relationships.

Canada's federal government has introduced Bill C-36, marking a significant departure from its predecessor Bill C-27 by unbundling AI regulation from privacy reform and establishing a new regulatory framework centered...

The Ontario government recently amended the Personal Health Information Protection Act (PHIPA) to include mandatory breach reporting.

These regulations, which include fines of up to $100,000CAD for non-compliance, will come into force on November 1, 2018.

Canada's proposed Bill C-36 would fundamentally transform private-sector privacy law by replacing PIPEDA with the Protecting Privacy and Consumer Data Act. Organizations face stricter data collection tests, new consent exceptions, explicit AI governance rules, and penalties reaching $25 million or 5% of global revenue for knowing violations.

Canada's proposed Bill C-36 introduces sweeping reforms to private sector privacy law, replacing PIPEDA with the Protecting Privacy and Consumer Data Act.

Ontario commercial truck drivers with less than two years of heavy-truck experience must now pass a practical road test administered by Quebec's SAAQ before transferring their licence to operate heavy vehicles in the province. This new requirement follows fatal collisions and an Ontario Auditor General audit that exposed significant gaps in training standards and provider oversight. Carriers operating across the border need to factor these requirements into workforce planning, recruitment timelines, and dis

Keeping up with employment law in Canada used to be a marathon. Now, it's a sprint. For employers in Québec, Ontario, and British Columbia, a significant volume of new legislation...

Canada's federal government is seeking public input on AI transparency measures that could introduce new disclosure obligations, incident reporting requirements, and tracking mechanisms for AI systems. Organizations have until September 23, 2026 to influence the regulatory framework before it takes shape through potential legislation, standards, or mandatory requirements.

On September 15, 2026 (“Announcement Day”), the Department of Finance released draft legislative proposals to implement the “Productivity Mega Deduction,” permanent 100% first-year (“immediate”) expensing for a wide range of new or used depreciable property and for Canadian development expenses (“CDE”)...

Deepfakes are reaching courts. Learn how a U.S. case dismissed for AI-generated evidence and Canadian authentication rules are changing what litigators must do now.

Quebec's new Bill 24 prohibits businesses from using a person's identity or image in consumer advertising without consent, creating significant compliance obligations for companies using AI-generated content, synthetic voices, and digitally altered spokespersons. The legislation introduces broad enforcement powers and extends liability beyond content creators to platforms that distribute or facilitate unauthorized representations.

Foreign companies hiring Canadian employees or allowing remote work from Canada face immediate payroll obligations that begin the moment employment duties are performed on Canadian soil. Understanding income tax source deductions, CPP and EI premiums, provincial payroll taxes, and director liability rules is essential for compliance, regardless of whether the employer maintains a physical Canadian presence.

A 2026 Ontario Court of Appeal decision reveals that construction contracts signed years after legislative reforms may still be governed by the old Construction Lien Act if the procurement process began before July 1, 2018. The ruling demonstrates how early project proposals and negotiations can determine which statutory regime applies, regardless of when the final contract was executed or where the project was ultimately built.

As a non-resident engaging in activities in Canada, it is important to understand whether your activities will result in income tax being levied.

Canadian organizations developing, acquiring, deploying or using AI have until September 23, 2026 to contribute to shaping the federal government's approach to AI transparency through a public consultation. Innovation, Science and Economic Development Canada is seeking input on five key areas that could lead to new disclosure obligations, incident reporting requirements, and AI agent tracking mechanisms.