Privacy & Data Management Blog

B.C.’s Provincial Health Officer, Dr. Bonnie Henry,^[1] and the Public Health Agency of Canada,^[2] have recommended that individuals who are not fully vaccinated^[3] continue wearing masks in indoor public spaces.

At the same time, public authorities are providing little to no guidance on how or when businesses can continue mask requirements. They are also not ...

With increasing numbers of Canadians being immunized each day against COVID-19, the question on many peoples’ minds is whether Canadians will be asked to prove they are vaccinated by way of a vaccine passport. Vaccine passports can take a range of forms, but the defining feature is a verified record of a person’s immunization status.

The question many employers are now ...

All indications are that the evolution of privacy laws and their impact will continue to evolve, perhaps even at a greater pace, in 2021. In celebrating Privacy Day, January 28, 2021, we would like to share four things businesses should be keeping their eyes on, and planning for, in 2021.

1. Significant changes to privacy legislation in Canada.

Canadian federal and ...

The Privacy Commissioners of Canada, Alberta and British Columbia issued a joint investigation report, finding that Cadillac Fairview did not obtain adequate consent for the collection of digital images of faces through facial recognition technology (Anonymous Video Analytics) installed in wayfinding directories in some of their Canadian shopping malls.

Is consent ...

The Office of the Privacy Commissioner of Canada (“OPC”) has now decided^[1] that the Personal Information Protection and Electronic Documents Act (“PIPEDA”) does not require organizations to obtain separate express consent for the transfer of personal information to service providers located outside of Canada.

The recent decision makes it clear, however ...

Today’s decision by the European Court of Justice (Schrems II) invalidated the US Privacy Shield as a basis for privacy protections permitting the transfer of personal data outside of the EU. The decision has many implications for international commerce, including businesses operating in Canada.

One result is that Canada may become a preferred choice for data storage ...

As we have outlined in Part 1 and Part 2 of our blog series, ‘Returning the Workplace to Safe Operation’, employers have a duty to reduce the risk of COVID-19 in the workplace as much as reasonably practical. Consequently, employers may determine it is appropriate to conduct certain active screening, such as questionnaires, temperature screening, and testing ...

As businesses begin to reopen, many organizations will examine ways to protect their workers and attract returning customers. Various mechanisms to screen customers for COVID-19 risks will become more common. Examples include providing customers with questionnaires regarding their travel history, exposure to others, and symptoms, or temperature scanning before ...

Canada’s Competition Bureau determined Facebook Inc. made false or misleading claims about the privacy of Canadians’ personal information on Facebook and Messenger. Facebook Inc. will pay a $9 million penalty in a settlement as a result, and pay an additional $500,000 for investigation costs.

This settlement is an important indicator of the shift that Canada’s ...

Provincial health orders, guidance and physical distancing measures in response to COVID-19 have changed the way Canadians are working and studying. Organizations are suddenly more reliant on technical tools and approaches to doing business which have not all been fully vetted for privacy and security.

Over the past few weeks, Canadian privacy commissioners have made ...