The Office of the Privacy Commissioner of Canada has released a consultation paper that signals a major shift in its position on data transfers, indicating that it now believes that cross-border disclosures of personal information require prior consent. The approach is a significant reversal of longstanding policy that relied upon the accountability principle to ensure that organizations transferring personal information to third parties are ultimately responsible for safeguarding that information. In fact, OPC guidelines from January 2009 explicitly stated that “assuming the information is being used for the purpose it was originally collected, additional consent for the transfer is not required.”
Archive for April 10th, 2019
Recent Posts
Government Finally Splits the Online Harms Bill: Never Too Late To Do The Right Thing…Or Is It? 
Canadian Media Companies Target OpenAI in Copyright Lawsuit But Weak Claims Suggest Settlement the Real Goal 
The Law Bytes Podcast, Episode 221: Inside My Canadian Heritage Committee Appearance on Freedom of Expression 
When Antisemitism Isn’t Taboo: Reflecting on the Response to Nazi-Era Hate on the Streets of Montreal 
The Law Bytes Podcast, Episode 220: Marina Pavlović on the CRTC’s Plans to Address Consumer Frustration Over Wireless Contracts
