What Businesses Need to Know About Their Legal Obligations When Outsourcing Data Processing to Third-Party Service Providers

Did you know that Canadian businesses have legal obligations under Canada’s federal privacy law, the Personal Information Protection and Electronic Documents Act (“PIPEDA”), when they engage third-parties to process personal data? By now, Canadian businesses should be aware of their mandatory data breach reporting obligations under PIPEDA. In short, those obligations require Canadian businesses to: [...]