Professor Geist’s weekly Toronto Star Law Bytes column (Toronto Star version, HTML backup article, homepage version) examines the emergence of a jurisdictional gap in Canada’s privacy law. According to a recent letter from the Privacy Commissioner, the legislation does not extend to investigating organizations without a physical presence in Canada. The column argues that that approach leaves Canadians with a significant hole in their privacy legislation and less protection that U.S. residents in certain instances.
CIBC Breach Spotlights Jurisdiction Gap in Canadian Privacy Law
December 13, 2004
Share this post

Law Bytes
Episode 275: David Loukidelis on Why Stripping Privacy Enforcement from Canada’s Privacy Commissioner in Bill C-36 is Unnecessarily Risky Policy
byMichael Geist

June 22, 2026
Michael Geist
Search Results placeholder
Michael Geist on Substack
Recent Posts
Why Being Locked Out of Frontier AI is The Sovereignty Threat Canada Missed
Blocked Twice: How Bill C-34’s Kids’ Social Media Ban Would Compound the Online News Act’s Harm to Young Canadians’ News Access
The Law Bytes Podcast, Episode 275: David Loukidelis on Why Stripping Privacy Enforcement from Canada’s Privacy Commissioner in Bill C-36 is Unnecessarily Risky Policy
The Data on Australia’s Social Media Ban: The Better the Privacy Protection, The Less Effective the Ban
Shaky Ground Gets Shakier: What the U.S. Supreme Court’s Location Data Decision Means for Bill C-22
