Tag: CPPA

automated decision making

Using privacy laws to regulate automated decision makingUsing privacy laws to regulate automated decision making



Making decisions about individuals using computers and computer algorithms is now commonplace. There are now also increasing proposals to use privacy laws to regulate automated decision making. One of the first explicit attempts to regulate automated decision-making using privacy laws is the European Union General Data Protection Regulation (GDPR).  More recently (and locally), both the Consumer Privacy Protection Act (CPPA), Canada’s proposed controversial new privacy law, and Bill 64, Quebec’s proposed privacy amendments, would enact new transparency and explainability obligations for automated decision making.…

what the CPPA means for you

Crestview panel on what the CPPA means for CanadiansCrestview panel on what the CPPA means for Canadians



I had the pleasure of participating today in a Crestview moderated panel that focused on what the CPPA means for Canadians. I was joined by Jackie Choquette, Interim Practice Lead, Government Relations, Crestview Strategy, Sarina Rehal, Vice President, Crestview Strategy, and Bill Abbott, Director Data Policy and Research, Data & Trust Office, TELUS.

You can view a recording of the Crestview moderated panel below:

If you just want to see the slides used at the Crestview moderated panel, they are below:

Liability under the CPPA

Liability under the CPPALiability under the CPPA



The headlines about the new proposed federal privacy law, the Consumer Privacy Protection Act (“CPPA”), frequently focus on the extremely high penalties and fines for non-compliance. But, these headline miss by a wide margin how onerous liability under the CPPA will be.

The liability under the CPPA will be a major departure from the PIPEDA regime. The changes are explained in the detailed blog post, The CPPA’s Privacy Law Enforcement Regime published by McCarthy Tetrault lawyers Gillian Kerr, Nikiforos Iatrou, Pippa Leslie and I (with help from Daanish Pasricha).…

CPPA: transfers of personal information to service providersCPPA: transfers of personal information to service providers



The Consumer Privacy Protection Act (CPPA) will make substantial changes to Canada’s privacy law. As noted previously, the bill includes many of the provisions in the Personal Information Protection and Electronic Documents Act (PIPEDA), plus a lot more. In some cases, it builds on the provisions of PIPEDA, on the guidance and decisions of the Commissioner, but includes changes designed either to clarify or change the law. A case in point are the very important new provisions which address transfers of personal information to service providers.…