The Office of the Privacy Commissioner of Canada has released a consultation paper that signals a major shift in its position on data transfers, indicating that it now believes that cross-border disclosures of personal information require prior consent. The approach is a significant reversal of longstanding policy that relied upon the accountability principle to ensure that organizations transferring personal information to third parties are ultimately responsible for safeguarding that information. In fact, OPC guidelines from January 2009 explicitly stated that “assuming the information is being used for the purpose it was originally collected, additional consent for the transfer is not required.”
Archive for April 10th, 2019
Recent Posts
The Law Bytes Podcast, Episode 281: Mikolaj Barczentewicz on Europe’s Digital Sovereignty Push, CADA, and the Implications for Canada 
Ofcom Did the Work Canada Plans to Skip: What the UK’s Age Verification Report Reveals About the Bill C-34 Social Media Ban 
The Age Verification Bill That Won’t Die: How Bill S-209 Complicates the Government’s Bill C-34 Online Safety Plan 
The Law Bytes Podcast, Episode 280: A Fall Update on Where Things Stand on Canadian Digital Policy Reforms 
The Wrong Ban: The Heritage Committee Backed a Targeted Ad Ban for Kids and Stopped Short of a Social Media Ban, Yet the Government Chose the Reverse
