Cybersecurity through balanced information security policies

Cybersecurity through balanced information security policies

Simply defined, personally identifiable information (PII) is any information that can be used to identify a particular person. Examples include an individual’s full name, Social Security number, driver’s license or ID number, …

Adomas Siudika

CCPA toll-free phone number requirement

CCPA toll-free phone number requirement

NOTE: Since the writing of this blog, CCPA has been replaced by CPRA. The CCPA: California Consumer Privacy Act provides consumers with the opportunity to make a number of requests to businesses …

Tyler Pewitt

Who is exempt from PIPEDA?

Who is exempt from PIPEDA?

The Personal Information Protection and Electronic Documents Act (PIPEDA) is a privacy law that protects the Personally Identifiable Information (PII) of Canadians. PIPEDA has strict restrictions on the collection, use, and disclosure …
Avatar photo

Donata Stroink-Skillrud

GDPR: Transferring data outside of the European Union

GDPR: Transferring data outside of the European Union

The General Data Protection Regulation (“GDPR”) requires a data controller to implement safeguards to protect the personal data of residents in the European Union (“EU”). When an organization transfers data outside of …

Alice Porch

PIPEDA Fair Information Principle: Accountability

PIPEDA Fair Information Principle: Accountability

The Personal Information Protection and Electronic Documents Act (PIPEDA) is a privacy law that protects the Personally Identifiable Information (PII) of Canadians. The law achieves this goal by prescribing how PII can …
Avatar photo

Donata Stroink-Skillrud

PIPEDA Fair Information Principles: Individual Access

PIPEDA Fair Information Principles: Individual Access

The Personal Information Protection and Electronic Documents Act (PIPEDA) is a privacy law that was enacted to protect the privacy rights of residents of Canada. The right to access one’s personal information …

Skylar Young

PIPEDA Fair Information Principles: Limiting Collection

PIPEDA Fair Information Principles: Limiting Collection

In an effort to give individuals control over how their information is handled by private organizations, many countries have enacted comprehensive privacy laws that include a collection limitation principle. In this article, …

Skylar Young

GDPR creating data flow maps

GDPR creating data flow maps

The General Data Protection Regulation (“GDPR”) allows residents in the European Union (“EU”) to have control over their data. Under the GDPR, a controller must maintain an internal record of all its …

Alice Porch

Does the CCPA apply to employee information

Does the CCPA apply to employee information?

Since the writing of this blog, CCPA has been replaced by CPRA. As the work-from-home model becomes the norm during the COVID-19 era, both employees and employers have made a number of …

Tyler Pewitt

GDPR data breach reporting requirements

GDPR data breach reporting requirements

The General Data Protection Regulation (“GDPR”) is a broad set of regulations in the European Union (“EU”) that protects the personal data of its residents. Under the GDPR, if an organization has …

Alice Porch

PIPEDA Fair Information Principle: Safeguards

PIPEDA Fair Information Principle: Safeguards

The Personal Information and Electronic Documents Act (PIPEDA) is a privacy law that imposes rules on the collection, use, and disclosure of the Personally Identifiable Information of Canadians. This law requires certain …
Avatar photo

Donata Stroink-Skillrud

PIPEDA rights for consumers

PIPEDA rights for consumers

The Personal Information Protection and Electronic Documents Act (PIPEDA) is a privacy law that protects the Personally Identifiable Information (PII) of Canadians by providing certain privacy rights to individuals. The PIPEDA rights …
Avatar photo

Donata Stroink-Skillrud