Miller Thomson Blogs put a more conversational lens on Canadian law. See the diverse perspectives of our lawyers here.
MT Cybersecurity Blog
French data protection authority fines health software provider €1.5M for failing to protect personal information
May 17, 2022
|
Cybersecurity attacks, data security, and privacy breaches are no longer confined to the technical and esoteric discussions of lawyers, IT professionals, and privacy communities but rather over the past two years have become part of “coffee row” and “water cooler”...
Privacy Commissioners take stance against collection of biometric data
January 7, 2022
|
The collection (and over collection) of personal information, cybersecurity incidents, and data breaches have never been more topical. Advancements in technology have led to greater global interaction and allowed for commercial efficiency in a time of limited connection. With advancements...
Quebec’s new privacy law (Bill 64) is here – Canadian businesses take note!
October 12, 2021
|
While federal attempts to modernize Canadian law, in the form of Bill C-11, is languishing in privacy purgatory, the province of Quebec has completed the first step of its journey to bring its law in close alignment with those of...
Privacy injunctions: the judicial response to cyber ransom demands
September 30, 2021
|
Ransom demands from cyber terrorists have become an epidemic for businesses in Canada. As we have reported in previous articles, both for-profit and not-for profit businesses have been impacted. Governments and charities have not been spared from the destruction and...
OSFI updates cybersecurity breach notification requirements
September 13, 2021
|
The Office of the Superintendent of Financial Institutions (“OSFI”) released a new Advisory on Technology and Cyber Security Incident Reporting, effective August 13, 2021 (the “Advisory”) which seeks to govern how federally-regulated financial institutions (“FRFIs”) should disclose and report technology...
Ransomware trickles down into your supply chain – Kaseya cyberattack highlights cybersecurity risks and business impact
July 9, 2021
|
Over the July long weekend, Canadian, American, and other international businesses were victims of a far-reaching ransomware attack. The REvil group, a ransomware syndicate also known as Sodin or Sodinokibi, are believed to be behind the attack. This gang’s most prominent...
Canadian organizations take note – Data Protection Authority fines foreign-based business under GDPR for not having “Article 27” representative
May 17, 2021
|
As we have discussed in several previous articles, Canadian businesses and other organizations can be subject to the European General Data Protection Regulation (“GDPR”) for a number of reasons and in a number of different contexts, be it as a...
Ransomware – Privacy law, sanctions, and the pandemic
April 22, 2021
|
It is trite to say that no matter the sector, size, or location of an organization, cyberattacks can be devastating. As we have seen throughout 2020 and this year in Canada and elsewhere, data breaches and operational interruptions caused by...
The Consumer Privacy Protection Act (CPPA): Increasing accountability and transparency
February 16, 2021
|
In a recent MT Cybersecurity Blog, we discussed Bill C-11, the Consumer Privacy Protection Act (the “CPPA”), which was introduced on November 17, 2020, by the Minister of Innovation, Science and Industry with the aim of modernizing federal privacy law...
“Made in Canada” – What is happening to Privacy by Design under the CPPA?
February 5, 2021
|
“Privacy by Design” has long been understood as the “gold standard” of data protection and at the core of how to sustain privacy rights in the digital age. It is a concept that can be said to have been “made...
Disclaimer
This blog sets out a variety of materials relating to the law to be used for educational and non-commercial purposes only; the author(s) of this blog do not intend the blog to be a source of legal advice. Please retain and seek the advice of a lawyer and use your own good judgement before choosing to act on any information included in the blog. If you choose to rely on the materials, you do so entirely at your own risk.
