GDPR and Canada’s Privacy Regime: What Are the Differences?
Since its implementation on May 25, 2019, the European Union’s General Data Protection Regulation (the “GDPR”) has become one of the primary references in matters of privacy protection and digital trust. While it is true that an adequacy decision rendered by the European Commission recognizes that Canada’s Personal Information and Electronic Documents Act (“PIPEDA”) ensures an “adequate” level of protection of personal data, it was rendered pursuant to EU Data Protection Directive 95/46/EC, which has since been replaced by the GDPR.