My regular Law Bytes column (non-reg. hyperlinked version or Toronto Star version, homepage version) examines the development of Canadian privacy law, arguing that it is unfolding in three stages. The first stage focused on self-regulatory initiatives such as the CSA Model Code. When few companies were willing to bind themselves to the Code, Canada embarked on stage two by establishing national privacy legislation that emphasizes mediation and light regulation.