Digital Privacy Act Compliance Diagnostic

Digital Privacy Act Compliance Diagnostic

Digital Privacy Act Compliance Diagnostic

Consumer sensitivity to recent privacy and data breaches and a new legislative landscape are changing the metrics of risk management with respect to cybersecurity, privacy, and data protection in Canada. Any company that collects, uses or discloses personal information in the course of its commercial activities is subject to new rules and best practices for preventing and reporting privacy breaches, record keeping, and obtaining valid consumer consents. New broader enforcement powers and penalties from the Privacy Commissioner of Canada means companies are now operating in an environment of heightened regulatory oversight, with an increased risk of monetary penalties and a heightened potential for damage claims. Companies should review their allocation of risk in light of these new developments.

We can help clients ensure compliance and develop a disciplined risk-based protocol in this new landscape.

How it Works
  • We work with you to scope and conduct an audit of your privacy infrastructure, which may include privacy policies, employee policies, inventory of personal information (includes an evaluation of existing consents), access controls, document retention practices and information security platforms.
  • We conduct a gap analysis and prepare a risk management chart outlining tangible, proactive steps that can be taken to ensure clients are equipped to implement a complete readiness program in light of the new amendments, and the breach notification requirements.
  • In addition to recommending changes to existing policies and procedures, we can assist our clients with process review and implementation, or with board briefings.

How Clients Benefit
  • Proactive approach to risk management: Leverage the expertise of Canada’s first multi-disciplinary Cybersecurity, Privacy and Data Protection Group to proactively review, assess and upgrade policies, putting yourself in front of changing legislation.
  • Protection of privilege: As trusted legal advisors, we can ensure appropriate protection of privilege should a claim or enforcement action ever be initiated. This distinguishes us from consulting firms.
  • Cost transparency: We can typically undertake these services under a fixed fee model, leveraging the industry’s most mature project management tools and software to provide cost transparency and detailed scopes and work plans.
  • End-to-end solutions: This solution can be paired with others like our Document Retention Toolkit and Incident Readiness & Response Plan Diagnostic to create a comprehensive cybersecurity, privacy and data protection offering.

Client Solutions Portal

Browse our solutions to discover which can help your organization

Dialogue Project Management®

We believe that no one knows what matters most to our clients better than our clients themselves. Some of our clients have told us they are looking for more predictability and control of costs. We've responded by mobilizing our people and our resources to enhance our project management capabilities.
Read more


Explore our firm-wide areas of practice and industry expertise to discover how we apply our collective knowledge and in-depth experience to deliver integrated legal solutions to complex business issues.
View areas of expertise

Transactions & Cases

Since 1855, we have participated in Canada’s most significant transactions and cases. Search our database to explore our depth and breadth of experience.
View transactions & cases