Canadian privacy laws and compliance guides
Compliance for Canadian organisations that have to prove they follow the rules, not just say so. Plain guides to PIPEDA, Quebec's Law 25, OSFI guidelines, SOC 2 and ISO 27001, and how to run one set of controls and one evidence base for every framework you're held to.
Compliance articles
5 articles shown
Compliance
Bill C-8 Explained: Is It in Force, and Does It Apply to Your Business?
Bill C-8 is law, but its CCSPA part isn't in force yet. See who it covers, the 72-hour reporting cap, and what suppliers to banks and telcos should prepare.
16 min read
Compliance
Cybersecurity Risk Assessment: A 5-Step Method with a Free Template
Run a cybersecurity risk assessment in 5 steps with our free Excel template: a 5x5 risk matrix, a risk register, and the Canadian rules it supports.
16 min read
Compliance
HIPAA in Canada: Does It Apply, and What PHIPA and PIPEDA Require Instead
HIPAA doesn't apply to most Canadian clinics. See which law does in your province, what a breach costs under PHIPA, and when HIPAA still reaches you.
13 min read
Compliance
What Is a SOC 2 Report? How to Read a Vendor's Report and Spot the Red Flags
What a SOC 2 report is, Type 1 vs Type 2, and how to read a vendor's report in 30 minutes: 12 red flags, plus what PIPEDA, Law 25 and OSFI expect.
17 min read
Compliance
What Is GRC? Governance, Risk and Compliance for Canadian Organisations
What GRC means, which Canadian rules it covers (PIPEDA, Law 25, OSFI, Bill C-8), the tools that run it, and a 90-day plan to start a GRC programme.
14 min read
