Did you know that Canadian businesses have legal obligations under Canada’s federal privacy law, the Personal Information Protection and Electronic Documents Act (“PIPEDA”), when they engage third-parties to process personal data?
By now, Canadian businesses should be aware of their mandatory data breach reporting obligations under PIPEDA. In short, those obligations require Canadian businesses to: