OPC Signals Policy Change for Data Transfers Across Borders
Apr 2019 Charity & NFP Law Update
On April 9, 2019, the Office of the Privacy Commissioner of Canada (“OPC”) released the report of its investigation of the 2017 data breach involving Equifax Canada Co. (“Equifax Canada”) and its US-based parent company, Equifax Inc. (the “Report”). The Report signals a sea change on the part of the OPC with respect to cross-border transfers of personal information – a change that could have significant potential implications for charities and not-for-profits.
The Report also identifies a number of contraventions of the Personal Information Protection and Electronic Documents Act on the part of both Equifax Canada and Equifax Inc. This Charity & NFP Law Bulletin provides an overview of the Report and the potential impact on charities and not-for-profits.
For the balance of this Bulletin, please see Charity & NFP Law Bulletin No. 445.