The Office of the Privacy Commissioner of Canada has released a consultation paper that signals a major shift in its position on data transfers, indicating that it now believes that cross-border disclosures of personal information require prior consent. The approach is a significant reversal of longstanding policy that relied upon the accountability principle to ensure that organizations transferring personal information to third parties are ultimately responsible for safeguarding that information. In fact, OPC guidelines from January 2009 explicitly stated that “assuming the information is being used for the purpose it was originally collected, additional consent for the transfer is not required.”
Archive for April 10th, 2019
Recent Posts
Senate Bill Would Grant Government Regulatory Power to Mandate Age Verification For Search, Social Media and AI Services Accompanied By Threat of Court Ordered Blocking of Lawful Content 
Government Reverses on Bill C-2: Removes Lawful Access Warrantless Demand Powers in New Border Bill 
Why The Recent TikTok Privacy Ruling Swaps Privacy for Increased Surveillance 
The Law Bytes Podcast, Episode 245: Kate Robertson on Bill C-2’s Cross-Border Data Sharing Privacy Risks 
The Law Bytes Podcast, Episode 244: Kris Klein on the Long Road to a Right to be Forgotten Under Canadian Privacy Law
