Ontario’s new cyber security regulation introduces mandatory cyber security programs and maturity assessments for designated public-sector organizations. Learn about the key requirements, reporting obligations, and July 1, 2027 compliance deadline.

Bill C-36 signals a changing approach to privacy, data protection and AI governance in Canada. We look at what has changed, what may be coming next, and how organizations can prepare for Canada’s evolving regulatory landscape.

David Goodis, Partner at INQ Law, has been named the recipient of the 2026 Karen Spector Memorial Award for Excellence in Privacy Law by the Ontario Bar Association, recognizing his legal excellence, thought leadership, and contributions to the privacy law community.

Ontario's Auditor General has identified significant gaps in AI governance across the Ontario Public Service, from security controls and procurement to bias testing and oversight. Learn the key findings, recommendations, and practical lessons public sector organizations can apply to strengthen responsible AI governance.

National Indigenous Peoples Day is a time to recognize the heritage, cultures, and contributions of First Nations, Inuit, and Métis peoples. It is also an opportunity to reflect on Indigenous data sovereignty: the right of Indigenous communities to govern how data about them is collected, used, and shared in an increasingly digital world.

Canada's proposed Bill C-36 would replace PIPEDA with a new privacy framework, introducing stronger enforcement powers, data deletion rights, cross-border transfer requirements, and new obligations for organizations using automated decision-making systems. Learn what these changes could mean for your privacy compliance program.

Canada's proposed Bill C-34 introduces new age-verification requirements for social media platforms, AI chatbots, and online services. While aimed at online safety, the legislation raises important privacy questions about data collection, protection, and retention. Learn what organizations should do now to prepare.

Generative AI is redefining the “cybersecurity poverty line,” widening the gap between organizations equipped to manage modern cyber threats and those struggling to keep pace. This article explores how agentic AI is reshaping cybersecurity risk, governance, regulatory exposure, and legal accountability for executives, boards, and in-house counsel.

Ontario Health’s updated “Path Forward” guidance outlines the next phase of Ontario Health Teams, including incorporation requirements, governance expectations, operational support structures, and standardized partnerships. In this blog, Simmie Palter breaks down the key updates and what OHTs and health system providers should expect moving forward.

DarkSword and Coruna challenge the myth of iPhone security, revealing zero-click exploits that can compromise data in seconds. Learn what happened, who’s at risk, and how individuals and organizations can protect devices, manage legal exposure, and respond to evolving iOS threats.

Canadian organizations may face increased cyber activity following recent U.S. and Israeli military strikes on Iran. This post breaks down the latest Canadian Centre for Cyber Security bulletin and outlines the practical steps in-house counsel should take now to strengthen breach preparedness, vendor oversight, and cyber risk governance.

As boards increasingly use AI-assisted tools, sound minute-taking remains central to good governance. This article examines best practices for board minutes under ONCA, the business judgment rule, and the legal and governance risks that arise when AI is used to support board and in-camera meetings.

Landmark 2025 privacy decisions are reshaping healthcare compliance in Canada. From ransomware notification duties to new fines and AI oversight, this post breaks down the developments health organizations can’t afford to ignore.

The Consumer Protection Act, 2023 modernizes Ontario’s consumer rules for the digital age. From streamlined agreements to stricter limits on contract changes, this article outlines what businesses need to know, and what to do now.

Ontario is seeking input on new consumer protection rules. Share your feedback by March 12, 2025. Have your say before it's too late!