The Office of the Privacy Commissioner of Canada has released a consultation paper that signals a major shift in its position on data transfers, indicating that it now believes that cross-border disclosures of personal information require prior consent. The approach is a significant reversal of longstanding policy that relied upon the accountability principle to ensure that organizations transferring personal information to third parties are ultimately responsible for safeguarding that information. In fact, OPC guidelines from January 2009 explicitly stated that “assuming the information is being used for the purpose it was originally collected, additional consent for the transfer is not required.”
Archive for April 10th, 2019

Law Bytes
Episode 278: Ben Waldman on Gander Social and the Challenges of Building a Sovereign Social Network
byMichael Geist

August 10, 2026
Michael Geist
Search Results placeholder
Michael Geist on Substack
Recent Posts
Denial, Hate, and Silence: The Three Responses to Overwhelming Evidence of Canada’s Campus Antisemitism Crisis
The Law Bytes Podcast, Episode 278: Ben Waldman on Gander Social and the Challenges of Building a Sovereign Social Network
Canada’s Campus Antisemitism Crisis: National Survey Finds Antisemitism Nearly Everywhere and University Responses Nowhere
Why the Answers to Hateful Content Online are Hiding in the Platforms’ Own Rules
From CCH to ChatGPT: How Canadian Copyright Law Played the Key Role in Deciding a Leading AI Training Data Case in India

