IAPP Canada Privacy Symposium 2025 (Toronto May 12 -13)

I will be presenting IAPP Canada Privacy Symposium 2025 (Toronto May 12 -13) on the following panels:

• Monday May 12: “Decoding Québec Act 25” with Chantal Bernier (10h45am – Osgoode Ballroom, Lower Concourse)

While most amendments proposed by Act 25 related to the protection of personal information in the private sector have been in effect since September 2023, certain aspects remain unclear. In this interactive session, key issues, challenges and strategies to ensure compliance with the new legal requirements will be explored. For example, uncertainties regarding the new consent criteria and obtaining minors’ consent; profiling technologies and default privacy settings; data transfers outside Quebec; data portability (including the type of data within the scope of this new right); the anonymization regulation (including wording around the use of anonymized data for “serious and legitimate purposes”); and mandatory breach reporting in case of a “serious injury” will be discussed.

• Tuesday May 13: “Another Five Years under PIPEDA: Filling the Gaps in Privacy Reform” with Bill Abbott, Kathleen Champagne and Lorraine Krugel (9am – Osgoode Ballroom, Lower Concourse)

With Bill C-27 stalled in Parliament, the Consumer Privacy Protection Act will not be replacing PIPEDA anytime soon. What does another 2-5 years of PIPEDA mean for privacy regulation, business and individuals? There are growing gaps between PIPEDA’s high level principles and rapid real-world developments in technology and business practices. Canadian privacy regulators, provincial governments, courts and self-regulatory initiatives are becoming more assertive in filling these gaps, in areas like meaningful online consent, children’s privacy, appropriate purpose and the obligation to safeguard personal information. The OPC’s Deceptive Design Sweep, the Supreme Court’s Facebook Decision and Law 25 are a hint of what is to come.

This content has been updated on May 6, 2025 at 13 h 29 min.