POPULARITY
Welcome to the CanadianSME Small Business Podcast! Today, we're focusing on how small businesses can boost trust, resilience, and growth through strategic security and compliance practices. Joining us is Sanjay Chadha, Founder of SAV Associates Professional Corporation, who brings over 20 years of experience in cybersecurity, risk management, and auditing for organizations of all sizes. Sanjay's expertise in creating robust, compliant business frameworks makes him the perfect guide for navigating today's complex security landscape.Key Highlights:Security Compliance Essentials: Learn about critical regulations, including GDPR, PIPEDA, and Bill C-27, and how small businesses can meet these compliance standards.Risk Management Strategies: Sanjay shares insights on risk assessment, mitigation techniques, and how to prepare for evolving cyber threats.Building Trust through Transparency: How open communication about security practices can enhance customer trust and loyalty.Future of Security in Small Business: Emerging trends in cybersecurity that every small business owner should know to stay resilient and competitive.Special Thanks to Our Partners:RBC: https://www.rbcroyalbank.com/dms/business/accounts/beyond-banking/index.htmlUPS: https://solutions.ups.com/ca-beunstoppable.html?WT.mc_id=BUSMEWAIHG Hotels and Resorts: https://businessedge.ihg.com/s/registration?language=en_US&CanSMEGoogle: https://www.google.ca/For more expert insights, visit www.canadiansme.ca and subscribe to the CanadianSME Small Business Magazine. Stay innovative, stay informed, and thrive in the digital age!Disclaimer: The information shared in this podcast is for general informational purposes only and should not be considered as direct financial or business advice. Always consult with a qualified professional for advice specific to your situation
Monica Meiterman-Rodriguez is a Partner at Tueoris, an international privacy and security consulting firm, currently residing in Barcelona. She utilizes her US law degree and her experience in data protection and privacy to assist global clients in developing, maintaining, or growing their privacy programs. She has experience supporting compliance across global regulations including US state and federal requirements, EU/UK GDPR, PIPEDA, LGPD, etc. in addition to advising on specialized matters in the AdTech space such as targeted advertising, data analytics, AI and growing industry guidance (e.g., IAB, DAA, etc.). Monica is a member of the New York State Bar, New Jersey State Bar, as well as a Certified Information Privacy Professional (CIPP/US/E) and the Chapter Chair of the IAPP in Barcelona (Spain). References: Monica Meiterman on LinkedIn California Consumer Privacy Act EDPB Guidelines 01/2022 on data subject rights - Right of access GDPR Violation: German Privacy Regulator Fines 1&1 Telecom(BankInfoSecurity) Groupon Ireland Operations Limited – March 2024: the DPC finds that Groupon infringed Article 5(1)(c) GDPR by having initially required the complainant to provide a copy of their ID in order to verify their identity for the purposes of their access and erasure requests.
This bonus episode of Dark Poutine is brought to you by MasterCard. In this special episode, we're exploring a growing threat hitting more close to home than ever—cybercrime. We've dived deep into all sorts of dark tales before, but this one is a bit different because it's happening right now, affecting people and businesses across Canada. Sources: Mastercard Trust Centre | Cybersecurity Solutions for Every Business mastercard.ca/trust webcrunchers.com | Wayback Machine Elk Cloner John Draper Michael Calce Mafiaboy's story points to Net weaknesses Meet Mafiaboy, The 'Bratty Kid' Who Took Down The Internet 'Mafiaboy' breaks silence, paints 'portrait of a hacker' | CNN A Q&A with MafiaBoy Canadian Centre for Cyber Security Financial Transactions and Reports Analysis Centre of Canada | FinTRAC Cyber attacks in Canada | Konbriefing.com Why Canada has so many cyberattacks—and why we're all at risk | MacLeans Cyber attacks are getting easier, experts warn after 3rd federal incident | GlobalNews National Equifax hacked: Canadians among those exposed by credit monitoring company's data breach - National PIPEDA Findings #2019-001: Investigation into Equifax Inc. and Equifax Canada Co.'s compliance with PIPEDA in light of the 2017 breach of personal information - Office of the Privacy Commissioner of Canada Am I Impacted? | LifeLabs LifeLabs hack: What Canadians need to know about the health data breach | GlobalNews Privacy breach alerts and information | Province of NS Cyber Incident | ADSC Ticketmaster Data Security Incident Cyber security and cybercrime challenges of Canadian businesses, 2017 The Daily — Impact of cybercrime on Canadian businesses, 2021 Canadian Small Business Cybersecurity Survival Guide - Canadian Chamber of Commerce Nearly half of small businesses have experienced random cyberattacks in the past year | CFIB Ransomware/ Cyber Incident | Toronto Zoo Baseline cyber threat assessment: Cybercrime - Canadian Centre for Cyber Security Cyber Attacks in Canada 2023: A Year in Review Criminal hackers 'very likely' to pose threat to national security, economy in near term: report | CBC News Data Responsibility & Governance Practices | Personal Data Security Cybercrime: an overview of incidents and issues in Canada | RCMP Significant Cyber Incidents | Strategic Technologies Program | CSIS National Cyber Threat Assessment 2023-2024 | Canadian Centre for Cyber Security Learn more about your ad choices. Visit megaphone.fm/adchoices
I share 5 most overlooked elements on private practice websites. Episode Show Notes: kayladas.com/episode74 Free Boosting Business Community: facebook.com/groups/exclusiveprivatepracticecommunity Information Managers Pre-Made Practice Policy and Procedure Templates: kayladas.com/practice-policies Credits & Disclaimers Music by ItsWatR from Pixabay The Designer Practice Podcast and Evaspare Inc. has an affiliate and/or sponsorship relationship for advertisements in our podcast episodes. We receive commission or monetary compensation, at no extra cost to you, when you use our promotional codes and/or check out advertisement links. References Office of the Privacy Commissioner of Canada. (May, 2019). PIPEDA in Brief. Retrieved from https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/pipeda_brief/
I'll break down how to use social media so that you avoid privacy breaches and maintain your client's confidentiality. Episode Show Notes: kayladas.com/episode68 Free Boosting Business Community: facebook.com/groups/exclusiveprivatepracticecommunity Online Legal Essentials Legal Templates: kayladas.com/onlinelegalessentials Use coupon code EVASPARE10 to receive 10% off any legal template pack PESI Trainings: kayladas.com/pesi Credits & Disclaimers Music by ItsWatR from Pixabay The Designer Practice Podcast and Evaspare Inc. has an affiliate and/or sponsorship relationship for advertisements in our podcast episodes. We receive commission or monetary compensation, at no extra cost to you, when you use our promotional codes and/or check out advertisement links. References Canadian Association of Social Workers. (2005) Code of Ethics. Retrieved from https://www.casw-acts.ca/files/attachements/casw_code_of_ethics_0.pdf Canadian Association of Social Workers. (n.d.1). 5.1.1 Confidentiality. Retrieved from https://www.casw-acts.ca/en/511-confidentiality Canadian Association of Social Workers. (n.d.2). 4.2.1 Testimonials. Retrieved from https://www.casw-acts.ca/en/421-testimonials Office of the Privacy Commissioner of Canada. (2004, November). Questions and answers regarding the application of PIPEDA, Alberta and British Columbia's Personal Information Protection Acts. Retrieved from https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/r_o_p/02_05_d_26/ Office of the Privacy Commissioner of Canada. (2018, January). PIPEDA legislation and related regulations. Retrieved from https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/r_o_p/ Office of the Privacy Commissioner of Canada. (2019, May). PIPEDA in brief. Retrieved from https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/pipeda_brief/
Send us a Text Message.Debbie Reynolds “The Data Diva” talks to Sharon Bauer, Founder of Bamboo Data Consulting in Canada. We discuss the complexities of the privacy landscape in Canada, including the outdated federal privacy legislation PIPEDA and the challenges posed by new technology. We emphasize the importance of staying informed and proactively addressing potential legislative developments while acknowledging the nuances and complexities of advising clients in the evolving legal landscape. We also discuss the evolving landscape of privacy in the digital age, highlighting the disconnect between privacy professionals' perspectives and consumer behavior. Sharon emphasizes the critical role of trust in driving consumer action, loyalty, and data collection for companies, stressing the need for companies to prioritize building trust with consumers. We explore the challenges companies face in comprehending and adhering to privacy regulations, including the lack of education and transparency, particularly among medium-sized businesses. We also discuss the multifaceted issues surrounding privacy and data protection, including the implications of data misuse, the need for informed consent, and the long-term consequences of data disclosure. We express frustration with the limitations of automated privacy assessment tools and emphasized the need for tools to consider businesses' diverse operational and ethical contexts. Sharon shares her frustration with the operationalization of privacy and stressed the importance of humanizing the process. We also discuss the importance of using real-life examples to educate companies about privacy missteps and Sharon's hope for Data Privacy in the future.Support the Show.
“It's hard to have privacy without security and to have effective security that requires strong protection of personal identifiable information, or PII. So security, privacy, and compliance really must go hand in hand. If one is prioritized over the other, it can have an adverse effect.” - Christina AnnechinoOn this episode, we welcome back both Christina Annechino and Marie Joseph to bring us back to a little more 101 on Cybersecurity. With host Jara Rowe, the team breaks down terms and buzzwords that you need to know to keep you and your company's data safe. Find out the difference between a breach and an incident, the nuances of security, privacy, and compliance, and gain insights into the crucial importance of cyber hygiene. We'll also explore the key differences between data security and data protection, understanding acronyms like GDPR, CCPA, HIPAA, and PIPEDA, and grasping the significance of maintaining asset inventories.In this episode, you'll learn: The difference between a breach, when a threat actor gains unauthorized access, and an incident, where data is compromised, is crucial for proactive security measures.Understand frameworks vs. standards: Frameworks provide an overview of requirements for compliance and certification, while standards outline specific criteria that must be met, forming the foundation of cybersecurity best practices.The importance of cyber hygiene or the tools, processes, and policies you need to maintain a strong security posture, enabling constant improvement in cybersecurity health within organizations.Things to listen for:[00:24 - 02:47] Introduction to episode and compliance series[02:57 - 04:25] The difference between security and privacy and compliance[04:28 - 06:08] The challenges in balancing security, privacy and compliance[06:26 - 07:24] The difference between risk and control[07:31 - 09:46] The difference between a breach and an incident[09:58 - 11:03] The difference between data security and protection[11:03 - 12:18] The most common data protection regulations[12:31 - 13:10] The difference between frameworks and standards[13:22 - 14:50] What is RBAC and how it relates to cybersecurity[14:50 - 16:45] The meaning of IoT and maintaining inventory assets[16:50 - 18:00] What does Cyber Hygiene mean[18:01 - 20:37] Jara's receiptsResources:Conquer Compliance Jargon: Download the Free Cybersecurity Compliance GlossaryData Security 101: Decoding Incidents and BreachesSafeguarding Your Connected Devices: A Practical Approach to IoT SecurityConnect with the Guest:Marie Joseph's LinkedInChristina Annechino's LinkedInConnect with the host:Jara Rowe's LinkedInConnect with Trava:Website www.travasecurity.com Blog www.travasecurity.com/blogLinkedIn @travasecurityYouTube @travasecurity
Sharon Bauer is a Lawyer and the Founder of Bamboo Data Consulting, a team of privacy consultants specializing in privacy, security, data strategy, and cutting-edge technology ethics work. As a consultant, she provides privacy solutions for various entities including retail, fintech, health, and education. Sharon is an expert in designing creative privacy programs solving hidden challenges for startups and international corporations. In addition to acting as a virtual chief privacy officer, IT World Canada named Sharon one of the Top 20 Women in Cybersecurity in 2022. In this episode… Quebec Law 25 is Quebec's privacy legislation, which applies to businesses or businesses collecting Quebec data. As a relatively new law, many companies need to know its governance framework. What are the critical concepts of Law 25, and how does it apply to company compliance? Privacy lawyer and consultant Sharon Bauer explains that companies should understand Law 25's key components: governance, privacy officer, transfer impact assessment, transparency, and employment. However, this privacy legislation does not apply to B2B businesses. Regarding privacy officers, Quebecian CEOs must either appoint a PO or hold themselves accountable for compliance with Law 25. Additionally, companies must adhere to the transfer impact assessment or privacy impact assessment when data is transferred outside of Quebec, when acquiring personal information, or when overhauling electronic service delivery systems involving destroying personal information. Sharon warns that companies that fail to comply with Quebec's Law 25 are subject to a $25 million fine. In this episode of the She Said Privacy/He Said Security Podcast, Jodi and Justin Daniels welcome Sharon Bauer, Founder of Bamboo Data Consulting, to examine Quebec's Law 25. Sharon reflects on her career background, discusses the intersection of Law 25 and the GDPR, and Canada's basis for Personal Information Protection and Electronics Data Act (PIPEDA).
In today's rapidly evolving digital landscape, there is often an apprehension towards new technology, as many people fear the unknown. However, it is vital to embrace a different perspective, one embodied by forward-thinkers like Genaro Liriano, the Director of Technology Operations Risk Management at CIBC. Instead of succumbing to fear, Genaro advocates for an approach that encourages learning and understanding of new technology. He believes that the essence of innovative technology lies in its potential to enhance and improve our lives. By gaining knowledge about these advancements, we can harness their power to solve problems, drive efficiency, and ultimately, make the world a better place. This mindset of curiosity, exploration, and adaptability can help us navigate the ever-changing technological landscape with confidence and optimism, rather than trepidation.Here's more about Genaro LirianoI am an Information Systems Security Professional with over 24 years experience in various aspects of Information Technology Management, devising strategic initiatives in the Information Systems Security realm. Helping Enterprises Manage and Govern through various regulatory requirements and industry standards such as: OSFI, FFIEC, PIPEDA,PCI DSS, etc.Hands on experience on various security controls such as: PKI, ATM Security, Security Operations, Management, Infrastructure and Operations, Network Security, End Point Security, Security Architecture, Online Banking, Mobile Banking, Online Banking for Business.Other skills: Customer Service, Voice-Over, Public SpeakingBroadcasting.
In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Crawford & Company capture key moments of the International Association of Privacy Professionals (IAPP) Global Privacy Summit #GPS23. We chatted with privacy friends and those who shared breakfast or lunch with us - an audience participation table! Join us as we connect with Kelli Lu, Maggie Gloeckle, Jon Bourke, Lily Russell, Eduardo Ustaren, ShanShan Pa, Isabel Hahn, Gamelah Palagonia, and others! As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email podcast@seriousprivacy.eu. Please do like and write comments on your favorite podcast app so other professionals can find us easier. The Leadercast PodcastThe fun way to grow you and your top talent.Listen on: Apple Podcasts Spotify As always, if you have comments or questions, find us on LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy and email podcast@seriousprivacy.eu. Rate and Review us! #heartofprivacy #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO
Have you been considering expanding your Canadian private practice? Can you counsel people who live in other provinces besides yours? What are the protocols? Online counselling is here to stay, and many counselling therapists and clients alike prefer this system with its flexibility and the autonomy it can provide them. However, there are some important regulations to be aware of when it comes to online counselling, especially when you want to broaden your reach and work with more clients. In this podcast episode, I take you through the process of finding out which provinces you can – at this time! – advertise in, and how to go about it ethically and safely, both for you and your future clients. In this Episode: Check for regulations Advertise in unregulated provinces Check your insurance How to counsel people in other provinces Check for regulations For the short answer, yes, you can provide interprovincial online counselling. However, there are a couple of important rules that you need to be aware of. If another province is regulated, then you cannot advertise in that province. For example, you cannot advertise yourself and your services in a directory, or any other type of paid advertising, that operates in the regulated province. However, there are two exceptions: if you have a client that moves to another province and you are already seeing them, then you can continue seeing them if someone finds your Canadian private practice by chance and wants to receive counselling services from you Advertise in unregulated provinces The provinces that are regulated – where you cannot advertise from another province – include: Nova Scotia New Brunswick Prince Edward Island Alberta (although the college has not yet been proclaimed) Ontario Quebec Unregulated provinces wherein you can advertise yourself include: Manitoba Saskatchewan British Columbia Yukon North West Territories Nunavut Newfoundland Check your insurance The next thing that you need to check is whether or not your insurance allows you to counsel outside of your province. For a recap of insurance in Canadian private practice, listen to this podcast episode. ‘If you are counselling people outside of Canada, with BMS insurance, they will only cover you if the complaint is filed in Canada. So, there's a lot of risk to counselling people outside of Canada.' – Julia Smith I choose to counsel people only in Canada to reduce the risks, and so that my professional liability insurance stays in check. How to counsel people in other provinces If you decide to counsel people in other provinces, then you need to make sure that you let your clients know about: The college that you are part of, if applicable Where you are located How to contact your regulator Your video-conferencing platform is PIPEDA compliant Additionally, if you are under supervision, you should only be counselling people in other provinces if your supervisor agrees to it. ‘Once you have checked off all those boxes, then you could counsel people in other provinces! You could advertise in provinces that aren't regulated, and if you have a client that moves to a different province, you can continue to see them!' – Julia Smith Another tip: keep up to date with which provinces are regulated and which ones aren't to avoid having to pay a fine. Here's some more information for you about CCPA and regulations for counselling in Canada. Connect with me: Instagram Website Resources Mentioned and Useful Links: Ep 60: Adding Insurance Companies to Your Canadian Private Practice Article: How to Set Up a Canadian Private Practice Website Listen to my Canadian private practice journey up until now! Listen to my podcast episode with Tara about insurance in Canadian private practice! Sign up for my free e-course on How to Start an Online Canadian Private Practice Jane App (use code FEARLESS for one month free) Rate, review, and subscribe to this podcast on Apple Podcasts, Google Podcasts, Stitcher, Spotify, Amazon, and TuneIn
The one where Darian interviews Julie from DAAC about:The policies surrounding tracking data and advertising practices. The importance of questioning the ethics concerning consent about collecting sensitive data.What is PIPEDA, a federal privacy law on collecting and using personal information, and the introduction of Bill C-27Sign up for the Marketing News Canada e-newsletter at www.marketingnewscanada.com.Special Offer for Marketing News Canada ListenersUnbounce can help you easily build landing pages, popups and sticky bars. Highly customizable and no coding required, anyone can get started on converting more traffic into leads, signups and sales. Try it yourself with a free 14-day trial and get 20% off your first three months now! https://unbounce.grsm.io/5cmrgz1mt3r6Thanks to our sponsor Jelly Academy. Jelly Academy has been helping professionals, students and teams across Canada acquire the skills, knowledge and micro certifications they need to jump into a new digital marketing role, get that promotion, and amplify their current marketing roles. Learn more about Jelly Academy's 6 Week online bootcamp here: https://jellyacademy.ca/digital-marketing-6-week-programSubscribe to our Marketing News Canada Magazine coming this November 2022!Subscribe today and receive 50% off a one year subscription to our printed magazine. Our first edition will be released this Fall 2022, followed by our second edition in Spring 2023. To receive your 50% discount, enter the coupon code: MNC-MAG-50 during checkout.Subscribe Now!Follow Marketing News Canada:Twitter - twitter.com/MarketingNewsC2Facebook - facebook.com/MarketingNewsCanadaLinkedIn - linkedin.com/company/marketing-news-canadaYouTube - youtube.com/channel/UCM8sS33Jyj0xwbnBtRqJdNwWebsite - marketingnewscanada.com Follow Darian Kovacs:Website - jellymarketing.com/darianLinkedIn - linkedin.com/in/dariankovacsFacebook - facebook.com/dariankovacspageInstagram - instagram.com/dariankovacsTwitter - twitter.com/dariankovacs Follow Julie Ford:LinkedIn - https://www.linkedin.com/in/julieford/Advertising Inquiries: https://redcircle.com/brandsPrivacy & Opt-Out: https://redcircle.com/privacy
We discuss Bill C-27, the Consumer Privacy Protection Act, Personal um, something AI and a tribunal, I think? It does not matter, because the federal government took the last bill ('the other' Bill C-11) to try to replace the Personal Information Protection and Electronic Documents Act (PIPEDA) and MADE IT WORSE. Wow.The new Bill C-27 guts consumer privacy by simply abolishing it and replacing it with a regime of business use of consumer information. All done without your knowledge and consent. But don't worry, it will all be used by the artificial intelligence (AI) industry to do whatever discrimination they say is important to do with all of that big data. Oh, sprinkle on the bacon bits of all of the exceptions (legitimate interests (of business)) from the European Union's GDPR with none of the constitutional rights to privacy of the individual they have there, ignore the mismatch with provincial privacy laws (especially Quebec), and just dare Europe to call this Bill what it clearly is: inadequate. Plus a bonus update on CRTC's continued low-effort non-proceeding into the Rogers outage.With Executive Director John Lawford and PIAC staff lawyer Yuka Sai, who had to figure out the problems with C-11 back in Episode 5. Ah well, on with the show.
How do you keep your online data private? Are you willing to spend a couple of extra dollars a month to secure your – and your clients! – information safely? Do you know which Canadian platforms you can use to get started? In our increasingly digital world where we store our data online and risk hackers and data leaks, digital security cannot be undervalued or overlooked. Our clients trust us with not only their healing but also their information, so be proactive in becoming digitally safe! In this podcast episode, I discuss the essentials of digital protection and a bunch of great, Canadian services that you can use today. In This Episode: PIPEDA PHIA Encryption VPN PIPEDA PIPEDA sets the ground rules for how private-sector organizations collect, use, and disclose personal information of for-profit and commercial activities across Canada. Luckily for Canadian therapists, most of the big electronic medical record systems used in the mental wellness industry have incorporated PIPEDA into their platforms. ‘I highly recommend looking into Jane App because it is a Canadian-based EMR, so you know they're doing everything right in regards to Canadian privacy laws.' – Julia Smith Learn more about PIPDEA by clicking on this link. PHIAPHIA stands for the Personal Health Information Act, and are provincial laws that govern the collection, use, disclosure, retention, disposal, and destruction of your personal health information. For example, in Nova Scotia, your data needs to be stored only on Canadian servers. To make sure all your bases are covered, get a Canadian EMR to be safe (even if your province doesn't require it now they may in the future!). ENCRYPTION Even though your EMR takes care of the majority of securing your data, your emails may not be so safe. Aim to make use of an email service that uses encryption to maintain your online privacy and safety. Encryption prevents unauthorized users on the network from intercepting and capturing your login credentials, and any email messages you send or receive, as they leave your email provider's server and travel from server to server around the Internet. ‘I always recommend with emails [to not send] too much confidential information. Rather, talk on the phone with somebody about it than send all that information. Or, courier that information instead of sending it through email.' – Julia Smith To learn more about email encryption, click on this link. Try Hushmail! Follow this link to receive a discounted price to use Hushmail and keep all your email data completely safe, secure, and legally stored on Canadian servers. VPN A “virtual private network” creates an encrypted tunnel for your data, protects your online identity by hiding your IP address, and allows you to use public Wi-Fi hotspots safely. Nord VPN is what I use to keep my work activity private online, I love how affordable and easy it is! Follow this link to get a great deal on their services through my offerings. Some quick tips: Turn your VPN off when you are doing online counselling because it can slow down the connection. Delete voicemails off your phone system once you have seen and listened to them. Work with Grasshopper for a secure and easy-to-navigate phone system! With platforms like Slack, set the system to delete old messages at least every 35 days. Connect with me: Instagram Website Resources Mentioned and Useful Links: Ep 35: How Do I Prepare for Private Practice While Still in Grad School?: Live Consultation With Barb Barker Article: How to Set Up a Canadian Private Practice Website Sign up for my free e-course on How to Start an Online Canadian Private Practice Jane App (use code FEARLESS for one month free) Listen to my podcast episode with Ali Taylor to learn more about privacy laws Listen to my podcast episode about hiring a Canadian virtual assistant and safe virtual communication Learn more about Hushmail on their website Follow this link to get discounts on Hushmail and Nord VPN Rate and subscribe to this podcast on Apple Podcasts, Google Podcasts, or Spotify.
This episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool connect with Lauren Reid, a privacy and digital ethics consultant and president of the Privacy Pro in Toronto. Listen as Paul and Dr. K connect on all things current in Canada, especially related to C27, the newest proposal to update PIPEDA - following up from C11, which failed to pass in the previous election year.As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email seriousprivacy@trustarc.com. Please do like and write comments on your favorite podcast act so other professionals can find us easier. Please vote for k for cybersecurity woman of the year in the lawyer category https://www.surveymonkey.com/r/PJLY6KW
Parliament is now on break for the summer, but just prior to heading out of Ottawa, the government introduced Bill C-27. The privacy reform bill that is really three bills in one: a reform of PIPEDA, a bill to create a new privacy tribunal, and an artificial intelligence regulation bill. What’s in the bill from a privacy perspective and what’s changed? Is this bill any likelier to become law than an earlier bill that failed to even advance to committee hearings? To help sort through the privacy aspects of Bill C-27, Ryan Black, a Vancouver-based partner with the law firm DLA Piper (Canada), joins the Law Bytes podcast to discuss everything from changes to consent requirements to how the law will be enforced.
When I started my Canadian private practice I did all the admin, from answering the phone to responding to emails. It took up a lot of hours that could have been focused on seeing more clients or building my practice. But finally I hired a virtual assistant and now my practice is growing and I haven't looked back! Are you still doing all the admin within your private practice while providing therapy to your clients? Do you find yourself stretched thin between all the deadlines and to-do lists? Maybe it's time for you to hire your first virtual assistant (VA)! In this podcast episode, I tell you my story and explain exactly how you can get started. In This Episode: Why is hiring a VA important? How I hired my first VA How to train your VA When should you hire your first VA? Why is hiring a VA important? As a counsellor, you don't want to waste your valuable time doing admin work like answering phone calls or responding to emails. These admin tasks can easily be done by someone else, freeing up your time and energy to focus on what you do best: being a therapist and helping people! Some reasons why hiring a VA is important for your business: You can then see more clients You can take more days off to rest Legitimize your business because clients have to go through your VA to get to you How I hired my first VA I decided I wanted to hire my own VA because I wanted the freedom to train them from the ground up for my specific Canadian private practice and I wanted them to do specific tasks that were not included in packages at virtual assistant companies. After realizing that these companies were not the right fit for me, the next option was to write up an ad and post it online. In this ad I wrote about: The qualities I was looking for in a virtual assistant The education that I was expecting from my VA The hourly price I was willing to pay How many hours of work per month I needed from the VA How to train your VA After you have found your VA, and hired them, this is what I recommend to train them to become a well-suited employee for your Canadian private practice: 1. Meet with your VA once a week for 30-minutes 2. Create a Google Doc instruction manual and have your VA as an editor so that you can both edit it as you are talking in real-time. 3. Use Slack for communication with your VA about scheduling or any work-related queries. Remember that Slack is not PIPEDA compliant, so be careful not to share any identifying information through it. 4. For password privacy, use Dashlane to share passwords securely with your VA and monitor how your VA is checking up on the accounts they need to. 5. Set up a virtual phone to contact your virtual assistant! Use Grasshopper to communicate with your VA easily and professionally. When should you hire your first VA? As soon as you can! It is one of the best investments that you can make in your Canadian private practice. Connect with me: Instagram Resources Mentioned and Useful Links: Ep 23: What should I Include in my Canadian Marketing Plan?: Live Consultation with Michelle Noftall Article: How to Set Up a Canadian Private Practice Website Sign up for my free e-course on How to Start an Online Canadian Private Practice How I Set Up My Canadian Private Practice | EP 02 How I Grew My Canadian Private Practice | EP 04 Consider using Slack for online communications with your VA Consider using Dashlane for security and privacy with your VA Consider using Grasshopper as a virtual phone system Rate, review, and subscribe to this podcast on Apple Podcasts, Google Podcasts, Stitcher, Spotify, Amazon, and TuneIn
Saudações! Até o final de 2023 cerca de 75% da população mundial deve ter suas informações pessoais cobertas por uma legislação de privacidade digital. Desde 2018 o Canadá tem a PIPEDA, A Lei de Proteção de Informações Pessoais e Documentos Eletrônicos mas, as pessoas não tem noção da importância que ela tem e por isso a gente vai explicar ela pra você. No "Je me souviens", conheça a história da incrível Jean Augustine, uma imigrante nascida em Granada e a primeira mulher negra deputada do Parlamento. E ainda, novas leis de controle de armas, o aplicativo do Tim Hortons acusado de roubar a privacidade dos usuários, mais deslizamentos de terra por causa de enchentes, o direito de "desconectar" dos funcionários, coiotes tomando banho na piscina e muito mais. Apoie este projeto no Patreon www.patreon.com/canadaagora == Minutagem 00:11:13 - Nacional, Nunavut, Northwest Territories, Yukon, British Columbia e Manitoba 01:00:23 - Je me souviens - Jean Augustine 01:07:10 - Ontario, Québec, Newfoundland & Labrador, Prince Edward Island e New Brunswick 01:58:27 - Oh! Canada - Lei de Proteção de Informações Pessoais e Documentos Eletrônicos do Canadá (PIPEDA) 02:16:53 - “Artes, Eventos, Sugestões” == Sobre o Canadá Agora: Um podcast especial, que analisa a política, economia e o cotidiano do Canadá, e fala desses assuntos como você quer ouvir. Siga a gente: canadaagora.com Facebook: www.facebook.com/canadaagora Twitter: www.twitter.com/canadaagora Instagram: www.instagram.com/canadaagora == Edição: Masaru Hoshi Roteiro: Masaru Hoshi, Paulo Enrique Dantas Produção: Masaru Hoshi, Paulo Enrique Dantas Músicas: Abertura: Lupin III Special Studio Session - Yuji Ohno & Lupintic Six A mari usque ad mare: Oh Canada - Daniel Hersog's O Canada Jazz Orchestra Je me Souvien: Mackinaw - Folk Music from Quebec "Oh Canada": Members Only - TrackTribe "Artes, Eventos, Sugestões": All the Fixings - Zachariah Hickman
How do you make your analytics strategy compliant to your privacy laws? How does PIPEDA, CCPA, GDPR, and so on influence how you engage with your current and potential customers? What are the differences between the privacy laws in Europe and North America and how do you respect all of them? How do privacy laws affect your analytics strategy? Maciej Zawadziński, CEO of PiwikPRO, is joining us on the Lights On Data Show to impart his knowledge on the subject.
Today on EP. 184 of the BlockHash Podcast, CEO Andrei Poliakov and Brandon Zemp talk about Coinberry and how they are a trusted Canadian Crypto Exchange. They are based in Toronto, FINTRAC registered and PIPEDA compliant. Listen to the full episode wherever you go on Anchor, Spotify, Apple, Google, Amazon Music and more! The podcast is available on… Apple Podcasts: https://podcasts.apple.com/us/podcast/blockhash-exploring-the-blockchain/id1241712666 Amazon Music: https://music.amazon.com/podcasts/6dc84ee4-845b-4bea-b812-b876daab2c7e/BlockHash-Exploring-the-Blockchain Spotify: https://open.spotify.com/show/4AGqU8qxIYVkxXM4q2XpO1 Google Podcasts: https://podcasts.google.com/feed/aHR0cHM6Ly9hbmNob3IuZm0vcy9iNmNhNWM0L3BvZGNhc3QvcnNz Website: www.blockhashpodcast.com On Social Media… Website: https://www.coinberry.com/ Twitter: https://twitter.com/CoinberryHQ Instagram: https://www.instagram.com/coinberryofficial/ Facebook: https://www.facebook.com/CoinberryOfficial/ Find Brandon Zemp & the podcast on Social Media… Instagram: https://www.instagram.com/theblockhash/ Instagram: https://www.instagram.com/zempcapital/ Twitter: https://twitter.com/zempcapital Facebook: https://www.facebook.com/theblockhash LinkedIn: www.linkedin.com/in/brandonzemp NFTs by BlockHash… OpenSea: https://opensea.io/collection/zemp OpenSea: https://opensea.io/collection/kiseokkim OpenSea: https://opensea.io/collection/officialcryptoghosts Sign up for the newsletter… (FREE) Blockchain Weekly: https://www.getrevue.co/profile/zemp (MEMBERS ONLY) Blockchain Insider: https://www.getrevue.co/profile/zemp/members
Privacy reform in Canada has lagged at the federal level with the efforts to update PIPEDA seemingly going nowhere, but multiple provinces have moved ahead with amending their own laws. Quebec leads the way as late last month it quietly passed Bill 64, a major privacy reform package that reflects – and even goes beyond – many emerging international privacy law standards. Chantal Bernier, the former interim privacy commissioner of Canada, now leads the Dentons law firm's Canadian Privacy and Cybersecurity practice group. She joins the Law Bytes podcast to talk about Bill 64, including its origins, key provisions, and implications for privacy law in Canada. The podcast can be downloaded here, accessed on YouTube, and is embedded below. Subscribe to the podcast via Apple Podcast, Google Play, Spotify or the RSS feed. Updates on the podcast on Twitter at @Lawbytespod. Show Notes: Bill 64 on Modernizing Quebec privacy law – Why It Matters and How to Prepare for It Credits: Canadian Press, Bains Explains Update to Canada’s Digital Privacy Law
We spend some time with Danielle Mckinley (@thehipaachick) discussing the hot topic of HIPAA and PIPEDA complacence. Most of all, we had some fun along the way.
In this 162nd episode of Fintech Impact, Jason Pereira, award-winning financial planner, university lecturer, writer, and host interviews Edward Berks (Xero), Davyde Wachell (Responsive AI), and Chad Davis (LiveCA) on what works and doesn’t work with Open Banking in different countries around the world!Episode Highlights:1:03 – Everyone introduces themselves and their companies.4:06 – What market has done the best job of moving Open Banking forward?8:44 – Where have we seen the biggest struggles throughout the world?13:40 – David explains how North American banks are actively slowing down the process of Open Banking.17:00 – Everyone weighs in on TD’s current lawsuit against Plaid.21:05 – What is the correlation between market competition and outcomes?27:00 – Jason compares the American financial psyche with the Candian one.28:03 – Everyone discusses streamlining access to capital during COVID in Canada.33:30 – Why does the Canadian government continue to push timelines for Open Banking?37:30 – David discusses the opportunity that exists for financial regulators in Canada.39:30 – What is the timeline in Canada for the next thing that financial institutions should be excited about?41:10 – What would each guest change in the world of Open Banking?3 Key PointsThough Canada has PIPEDA, which guarantees people’s right to their data upon request, the banks have made the process a nightmare for the requester. Canadian banks colluded to ban Apple Pay in Canada in a manner that would be considered illegal in other countries.In Canada, Fintech was completely boxed out of the situation of providing relief during COVID, something it could have done much quicker than the major banks.Tweetable Quotes:“Australia has always been a little further along on the accounting and banking spectrum than Canadians and Americans and the UK. I think they’re going to be pretty well positioned to roll this out right as well.” – Chad Davis“Every time we give a password, we’re violating our fraud protection. That’s just a nonsensical stance to take.” – Jason Pereira“Whether or not you’re China or whether or not you’re a Canadian bank, the more you try to stop the flow of information, the more that information is going to flow.” – David Watchel“I think that there’s a herd instinct in well–established banks in most jurisdictions, and once you get that first domino toppling, it’s difficult for the other banks not to follow.” – Edward BurkeResources Mentioned:Facebook – Jason Pereira’s FacebookLinkedIn – Jason Pereira’s LinkedInFintechImpact.co – Website for Fintech ImpactJasonPereira.ca – Sign up for Jason Pereira’s newsletterWoodgate.com – Website for Woodgate FinancialXero.com – Website for XeroLiveCA.ca – Website for LiveCAResponsive.ai - Website for Responsive AI See acast.com/privacy for privacy and opt-out information.
Using data to make decisions—either by a person or by a machine—has become a big part of our lives over the past couple of decades. Our lawmakers have tried to keep up, but innovation will likely always outpace bureaucracy. And, in a world where most of us have clicked “I have read the terms and conditions” even when we haven't, the implications of out-of-date privacy laws could become serious.In November, the federal government introduced the Digital Charter Implementation Act to try to better protect Canadians and their privacy. This update to Canada's privacy laws is overdue, but will it do what it sets out to? Shaun Brown, lawyer and privacy expert, helps us understand the proposed new laws and what they might mean to you.Find Shaun on LinkedIn, or through the nNovation LLP website, nnovation.com, or on Twitter @nNovationllp.Listen to our other podcasts at conferenceboard.ca/insights/podcasts. You can find all of our research here: conferenceboard.ca/.
Debbie Reynolds "The Data Diva," talks to David Goodis the Privacy Commissioner of Ontario, Canada. We discuss his career transition into Data Privacy as a regulator, Data Privacy in Canada at present, a background of Canadian Data Privacy regulations over the last 20 years, current proposals for changes in Canadian Data Privacy regulations PIPEDA and frameworks, the use of AI and automated decision-making, socially acceptable beneficial purposes of data use, the need for transparency, the trust problem, onward data transfer, differences between Canada the U.S. and the EU and privacy legislation, commerce and the role of the FTC and future US data privacy laws, the adequacy question of the EU and Canada, and his wish for privacy enforcement in the future.
Debbie Reynolds "The Data Diva," talks to David Goodis the Privacy Commissioner of Ontario, Canada. We discuss his career transition into Data Privacy as a regulator, Data Privacy in Canada at present, a background of Canadian Data Privacy regulations over the last 20 years, current proposals for changes in Canadian Data Privacy regulations PIPEDA and frameworks, the use of AI and automated decision-making, socially acceptable beneficial purposes of data use, the need for transparency, the trust problem, onward data transfer, differences between Canada the U.S. and the EU and privacy legislation, commerce and the role of the FTC and future US data privacy laws, the adequacy question of the EU and Canada, and his wish for privacy enforcement in the future.
We look back to January 2020 - with no crystal ball for Serious Privacy with Paul Breitbarth and K Royal. With 47 episodes and over 25,000 downloads, Season 1 of Serious Privacy is complete. Thank you to our fans! Season 2 starts Global Privacy Day 2021. Our initial ideas were a little different, but K and Paul found their rhythm and a following. Join us as we look back, play some of our favorite moments, and look ahead to 2021. Our most popular episodes were What Now Right Now? Assessment of the EU Schrems II Decision with Gabriela Zanfir-Fortuna of the Future of Privacy Forum and Sophie in ’t Veld, which we put together the same day; Wildly Successful: An Unexpected Career in Privacy with Emerald de Leeuw; and Privacy on the Front Lines: A View from LA with Lillian Russell. We had phenomenal speakers from around the world (such as Travis LeBlanc, Profs. Dan Solove and Paul Schwartz, Sophie Kwasny, Fabricio da Mota Alves, Vivienne Artz, Marie Penot, Annelies Moens) and amazing topics (such as Sharenting, a tribute to Ruth Bader Ginsburg, Schrems II guidance, laws from around the world , social justice, women in privacy, data science, and gaming)Please see the full blog entry for a more complete listing. Check out all the episodes!Thank you and we look forward to 2021.Social MediaTwitter@podcastprivacy, @heartofprivacy, @EuroPaulB, @TrustArcInstagram @SeriousPrivacy
On 17 November 2020, the Canadian Minister of Information Science and Economic Development, Navdeep Bains, introduced bill C-11, the long-awaited update to the federal Canadian privacy legislation. For many years, this legislative update had been rumoured, and now that it was finally put on the table, we can see some sweeping changes. The Digital Charter Implementation Act, 2020, which includes the Consumer Privacy Protection Act, "would significantly increase protections to Canadians' personal information by giving Canadians more control and greater transparency when companies handle their personal information", the minister said. This week, we will take a look at what the new Canadian law might bring, how it would impact companies doing business in Canada and what novel approaches might be an inspiration for the rest of the privacy community. Our guests are two Canadian powerhouses: former Privacy Commissioner Jennifer Stoddart (now at Fasken), and nNovation counsel Constantine Karbaliotis. Both share their views on the federal and provincial legislative developments in Canada and look ahead at the potential impact of the new legislation.ResourcesBill C-11: An Act to enact the Consumer Privacy Protection Act and the Personal Information and Data Protection Tribunal Act and to make related and consequential amendments to other Acts - linkBig fines included in Canada's newly proposed national privacy bill - link Federal privacy reform in Canada: The Consumer Privacy Protection Act - linkPrivacy watchdog says he will look for amendments to new privacy legislation - linkSocial Media@TrustArc @PodcastPrivacy @HeartofPrivacy @EuroPaulB @ConstantK @FaskenLaw
Darren is a business leader and security professional with over twenty years of experience as a CEO and CISO of companies that handle sensitive data. Having founded a non-profit organization, three service companies, and two tech startups in his career, he understands how to assess and manage risk in alignment with organizational goals. Darren Gallop is also a tech entrepreneur, information security expert, Techstars alumni, board member, and the CEO of Securicy. He co-founded Securicy and led the team to develop a SaaS product that guides businesses through creating, implementing, and managing their information security and privacy compliance program. Gallop previously co-founded Marcato and was CEO there for 10 years, until the successful event management software company was acquired by Patron Technology. He is fluent in English, French, and adept in Spanish. Gallop spends much of his non-work time playing music, fly fishing, canoeing, gardening and roasting coffee. He is from Nova Scotia, Canada. Darren's unique perspective enables him to lead organizations through the process of baking security into their business practices while improving productivity. During this interview we cover: 00:00 - A word From The Sponsor 01:02 - Intro 02:33 - Darren's Background & Losing a Six Figure Deal After Security Reasons 05:03 - Opportunity & Problem to Solve That Motivated to Start Securicy 08:15 - Process From Idea to Launching & Initial Costs 12:51 - What SaaS Data security, Risks & Compliances are 18:11 - At What Point a SaaS company Should Start Thinking About CyberSecurity & Data Privacy 19:54 - The Most Common Data Breaches & Attacks 24:07 - Building, Framing & Documenting a Comprehensive, Integrated, Measurable, & Centralized Security Strategy 27:45 - Challenges a Being a Management Security Control Software 29:05 - Losing Trust & Regaining the Trust of the Customers & the Market 31:04 - Tips for Improving Your Internal Security & Privacy Systems 36:04 - Biggest Challenges Facing Now & Looking to Overcome in Continuing to Grow Securicy 38:01 - Top Resources Instrumental To Darren's Success 43:39 - What Does Success Mean to Darren? 46:17 - Outro Mentions: https://owasp.org/ (Open Web Application Security Project OWASP) Terms: https://gdpr.eu/what-is-data-processing-agreement/ (GDPR) https://oag.ca.gov/privacy/ccpa (CCPA) https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/ (PIPEDA) https://en.wikipedia.org/wiki/Denial-of-service_attack (DDoS Attack) https://www.varonis.com/blog/iso-27001-compliance/ (ISO 27001 Compliance) Books: https://www.goodreads.com/book/show/12975375-the-advantage (The Advantage) https://store.johnmaxwell.com/ (Developing The Leader Within You) Get In Touch With Darren: https://www.linkedin.com/in/darrengallop/?originalSubdomain=ca (Darren Gallop's Linkedin) darren@securicy.com Tag us & follow: https://www.facebook.com/HorizenCapitalOfficial/ (Facebook) https://www.facebook.com/HorizenCapitalOfficial/ https://www.linkedin.com/company/horizen-capital (LinkedIn) https://www.linkedin.com/company/horizen-capital https://www.instagram.com/saasdistrict/ (Instagram) https://www.instagram.com/saasdistrict/ (https://www.instagram.com/saasdistrict/) More about Akeel: Twitter - https://twitter.com/AkeelJabber (https://twitter.com/AkeelJabber) LinkedIn - https://linkedin.com/in/akeel-jabbar (https://linkedin.com/in/akeel-jabbar) More Podcast Sessions - https://horizencapital.com/saas-podcast (https://horizencapital.com/saas-podcast)
Canadian privacy legislation is getting a facelift, Twitter introduces Fleets instead of an edit button, and Amazon is officially allowed to deliver prescription medications to its US customers.
The Tech Humanist Show explores how data and technology shape the human experience. It's recorded live each week in a live-streamed video program before it's made available in audio format. Hosted by Kate O’Neill. About this episode's guest: Abhishek Gupta is the founder of Montreal AI Ethics Institute (https://montrealethics.ai ) and a Machine Learning Engineer at Microsoft where he serves on the CSE Responsible AI Board. He represents Canada for the International Visitor Leaders Program (IVLP) administered by the US State Department as an expert on the future of work. He additionally serves on the AI Advisory Board for Dawson College and is an Associate Member of the LF AI Foundation at the Linux Foundation. Abhishek is also a Global Shaper with the World Economic Forum and a member of the Banff Forum. He is a Faculty Associate at the Frankfurt Big Data Lab at the Goethe University, an AI Ethics Mentor for Acorn Aspirations and an AI Ethics Expert at Ethical Intelligence Co. He is the Responsible AI Lead for the Data Advisory Council at the Northwest Commission on Colleges and Universities. He is a guest lecturer at the McGill University School of Continuing Studies for the Data Science in Business Decisions course on the special topic of AI Ethics. He is a Subject Matter Expert in AI Ethics for the Certified Ethical Emerging Technologies group at CertNexus. He is also a course creator and instructor for the Coursera Certified Ethical Emerging Technologist courses. His research focuses on applied technical and policy methods to address ethical, safety and inclusivity concerns in using AI in different domains. He has built the largest community driven, public consultation group on AI Ethics in the world that has made significant contributions to the Montreal Declaration for Responsible AI, the G7 AI Summit, AHRC and WEF Responsible Innovation framework, PIPEDA amendments for AI impacts, Scotland’s national AI strategy and the European Commission Trustworthy AI Guidelines. His work on public competence building in AI Ethics has been recognized by governments from North America, Europe, Asia, and Oceania. More information on his work can be found at https://atg-abhishek.github.io He tweets as @atg_abhishek. This episode streamed live on Thursday, October 22, 2020.
The world of data privacy is constantly changing. In this episode with Justine Kasznica and Ashleigh Krick of Babst Calland’s Emerging Technologies Group, the duo will discuss: Overview of the General Data Protection Regulation (GDPR), Personal Information Protection and Electronic Documents Act (PIPEDA), and California Consumer Privacy Act (CCPA) Common elements among GDPR, PIPEDA, and CCPA; including: privacy policy notice requirements, business obligations, and consumer rights Overview of U.S. Regulatory Landscape: proposed state legislation and thoughts on federal action Practice pointers and best practices for compliance with existing privacy laws and preparing for the future Plus get insight on the FTC's investigation of Twitter. Read more on this topic at Babst Calland's EmTech Blog.
There have been several data privacy laws like GDPR, CCPA, PIPEDA, LGPD, and more, enacted in the past few years by various countries around the world. They are to be followed so that the customer data is handled correctly by businesses, organizations, and third-party service providers. These laws provide the rights to the users to understand how their information is being collected, used and they can raise a complaint about it if any rights are being violated. In this week’s podcast, we have Derek Lackey, Managing Partner at Newport Thompson, and a well-known data privacy expert in Canada. Dennis Dayman and Derek Lackey discuss privacy laws across countries and their impact on consumers and marketers alike in this highly insightful final podcast of season one. They Discuss: What is the real reason these data privacy laws were required, and how do they impact email? How will these laws impact a marketer’s ability to collect information about the data subject or user? How important is permission marketing with regards to privacy compliance? How will these laws empower consumers and change the way they share data with brands for marketing purposes? What have been the consequences of email spam due to privacy laws? What are the future trends you see developing in the data and email privacy?
TikTok says it’s planning to sue the Trump administration, Apple and WordPress lock horns after Apple gets a little greedy, and a story about PIPEDA and Tim Hortons catches fire on Reddit. #HashtagTrending #Podcasts
Dr Stephanie Perrin led the drafting initiative that resulted in Canada's first piece of privacy legislation to cover the private sector, the Personal Information Protection and Electronic Documents Act (PIPEDA). PIPEDA came into force in 2001 and is still in effect today. POWER PLAY's Ayden Férdeline hears the story behind the development of that law.
Personal data can often be a complicated side to critical business activities, such as mergers and acquisitions and bankruptcy. Since the beginning of the year, the world has been dealing with a global health crisis. But unfortunately, that is not the only crisis the world will be dealing with this year - by now it is clear our economy will take a serious hit as well. Companies will go under, or else may become targets for mergers and acquisitions while in a weakened state. That also may have an impact on the data holdings of organisations. Can sets of customer, employee and third-party data just be handed over from one company to the other, or sold to the highest bidder to return some money to investors? These highly impactful business activities, that are often executed rapidly, are not the times to overlook critical data allowances and restrictions. In this episode, we put these tough issues to Constantine Karbaliotis, a privacy veteran who has managed these issues for companies. Join us as we discuss how companies can prepare for and manage privacy issues in M&A and bankruptcy. We also took the opportunity to ask him for a Canadian’s perspective on the new CCPA regulations that have been filed with the California Office of Administrative Law. Resources:EDPB - Statement on the Data Protection Impact of Economic ConcentrationEDPB - Statement on Privacy Implications of MergersDutch DPA - Guidance on data processing in a bankruptcy situation (NL)CCPA Regulations filed https://oag.ca.gov/sites/all/files/agweb/pdfs/privacy/oal-sub-final-text-of-regs.pdfPrivacy and Data Security in Mergers & Acquisitions Solutions Brief
It's definitely not business as usual. I decided to do this podcast a little differently given the current times we are in and the challenges I know so many of you are facing. This episode of the Business of Becoming is for you if you once had a clinic and now don't, where you once worked in person with patients or clients in any capacity and now can't… your practice or business shut down overnight and now you're wondering what to do and will things ever go back to the way they were before. In today's episode, I'm joined by Dr. Alicia MacPherson, Dr. Tiffany Cheung and Gillian Reid who are all heavily regulated practitioners with online practices and businesses. We hosted this live conversation for dozens of naturopathic doctors and regulated practitioners who are left wondering… what do I do now? If you too find yourself wondering… this episode will be extremely helpful. More About My Guests: Dr. Alicia MacPherson, Naturopathic Doctor, and CEO of the MacPherson Method Dr. Tiffany Cheung, Naturopathic Doctor and Founder of Tiffany Erika Cheung Gillian Reid, Integrative Psychotherapist and Founder of Mother Zen Wellness and Braving Wild Motherhood What We Talk About In This Episode: The importance of having business fundamentals in place The need for business infrastructure and the questions to ask yourself Why having a system in place allows you to pivot quickly How to combine 1:1 patient with an online program/product Examples of 3 different business models so that you can start to conceptualize how this could work for you. See what is possible for growth-minded individuals How to pivot and optimize what works for you How to ensure compliance with PIPEDA through online forums and messaging Q&A from viewers Things We Mention In This Episode: 10K Success System Here's How To Subscribe & Leave A Review (pretty-please): Want to get notified when I release new episodes so you don't miss a thing? Click here to subscribe to the podcast on iTunes. And it would mean the world to me if you'd leave a rating and review. I'd love to know what you think of the podcast and how I can make it better for you. Plus iTunes tells me that podcast reviews are really important and the more reviews the podcast has the easier it will be to get the podcast in front of more people, which is the ultimate goal. You can leave a review right here. Let's Keep The Conversation Going… Were you impacted by the lockdown? Do you have a Plan B or any creative ways to generate income? I would love to hear all about it and I'm sure others would too. Comment below and share your story or visit me on Instagram which is currently my favourite way to connect. You can also join my free online community to connect with more than 16,000 other health practitioners just like you to ask questions, share wins and struggles and get lots of support from me and my team! I hope to see you there.
Organizations subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s federal private sector privacy law, are required to report to the Office of the Privacy Commissioner (OPC) any breaches of security safeguards involving personal information that pose a real risk of significant harm to individuals. They also need to notify affected individuals about those breaches, and keep records of all data breaches within the organization. On today's podcast, PIPEDA’s Mandatory Privacy Breach Notification, we will look at how PIPEDA applies to healthcare organizations and the vendors that support them. The Privacy Commissioner shares lessons learned after one year of mandatory breach reporting requirements under PIPEDA. Does PIPEDA Apply To You? PIPEDA applies to private sector businesses across Canada with the exception of Quebec, Alberta, and BC. In these provinces, provincial legislation wish is substantially similar to PIPEDA applies. In all cases, businesses which handle personal information which crosses provincial or national borders fall under PIPEDA regardless of which province that they are based in. In Alberta, we have privacy legislation called the Health Information Act (HIA) that takes precedence over PIPEDA and Alberta's Personal Information Protection Act, (PIPA). If a business, like a physician's office, has a privacy breach which includes health information, then the custodian of the physician office must report the privacy breach following the HIA regulations. If it's employee information or other non-health information is included in the breach then that triggers privacy breach notification under PIPA. Sometimes, a breach can include both types of information and the physician office must notify under both legislation. In BC the Personal Information Protection Act (PIPA) is BC's private sector privacy laws has also been deemed substantially similar to the federal private sector privacy law. BC does not have health information specific privacy legislation, so PIPA applies to private organizations in BC, including physician practices, and governs how the personal information about patients, employees and volunteers may be collected, used and disclosed. If you are a business in Canada, for example, an electronic medical records (EMR) business and you have a data center in Canada where all of your clients provide their information and store it in your data center, the EMR vendor likely falls under the PIPEDA regulations. The vendor may be responsive to other legislation as well. If you are an EMR vendor, you do not directly comply with the HIA in Alberta because that applies only to custodians. However, as an information manager of a custodian under the HIA, you have some obligations under the HIA in the event of a privacy breach. But that does not mean that you don't also have obligations under PIPEDA. Listen to the podcast to learn more! Show Notes You can advance the audio to the time entries 03:00 PIPEDA 03:18 Does PIPEDA apply to you? 04:11 Alberta 04:53 British Columbia 05:26 EMR vendor and businesses that support healthcare practices 06:52 What is personal information 07:44 Why is privacy important? In 2017, 65% of large organizations with more than 100 employees indicated that they were privacy aware, but only 43% of small businesses indicated that they were privacy aware. 09:11 What Is A Privacy Breach 12:44 PIPEDA Mandatory Privacy Breach Reporting Process 12:55 Keep Records 13:27 ROSH 14:04 Report to the OPC 14:10 Notification Information Manager Agreement – should indicate if a vendor should directly notify a patient about the privacy breach or if the custodian will do the notification. The Information Manager Agreement should also identify which party (parties) is responsible for the cost of notification. See the Practice Management Success Tip – Top 3 Agreements https://InformationManagers.ca/Top-3 15:46 What is ROSH? 17:47 What information, circumstances of the breach. 19:33 CASL Canada’s Anti-Spam Legislation 20:34 Good Privacy Is Good For Business When we know better, we can do better… I’ve helped hundreds of healthcare practices prevent privacy breach pain like this. If you would like to discuss how I can help your practice, just send me an email. I am here to help you protect your practice. How to Manage a Privacy Breach with Confidence The 4 Step Response Plan will help you with prevent privacy breach pain and give you the tips, templates, training, and tools that you can use right away to prepare your privacy breach response plan: In the world of privacy breaches ‘If’ has become ‘When’. Will you be ready? Click here for more information on the on-line 4 Step Response Plan course available now! https://informationmanagers.ca/4-step New! Podcast Key Word Search Tool Did you hear something on today’s podcast that you would like to go back and listen to again? Or, maybe you heard something on one of our previous podcasts that you want to listen to again, but you can’t remember which one and you would like to find it quickly and easily. Well, that’s easy to do now! If you heard something on this podcast that you want to re-visit, go to PracticeManagementNuggets.Live/search and enter the keyword in the magic box. You will automatically be brought to the podcast at the exact spot where we talked about it. Rate and Review the Podcast I am honoured that you choose to spend your time with me today. Thank you for the opportunity to share my obsession about privacy, confidentiality and security with you! Reviews for the podcast on whatever platform that you use is greatly appreciated! When you provide your honest feedback it helps other people just like you find content that may help them, too. If you received value from this episode, please take a moment and leave your honest rating and review. Jean L. Eaton, Your Practical Privacy Coach and Your Practice Management Mentor with Information Managers Ltd.
Add the CRM Radio skill to your Alexa capable device to play the most recent or choose from a list. Growing Email Compliance Issues – GDPR, CASL, and CCPA – What? ----more---- The database chicken has come home to roost and the results won’t be pretty for those that ignore it. Paul Petersen the host of CRM Radio interviews Dereck Lackey, managing director of Newport Thompson and Chairman of the Response Marketing Association. He is among other titles the author of CASL Compliance, A Marketers Guide to Email Marketing to Canadians. In this fast-paced information jammed 25-minute live program broadcast on December 19, 2019, and now available as a podcast they discuss: Jan 2, 2020 California Consumer Protection Act (CCPA) and its far-reaching consequences How new laws prevent marketers from doing whatever the hell they want to the customer Why CCPA is more targeted to companies that sell data but doesn’t apply to non-profits How every company web form will all be affected Why legislation is the direct result of marketers who checked out of respecting the customer Why it’s embarrassing that governments had to legislate to take care of customers Why you must have someone in your company who is the data controller Is GDPR the gold Standard for data protection? How consumer protection acts are good for your company About Derek Lackey With more than 30 years’ operating an advertising agency, Derek is focused on data protection & privacy and its effect on the brand. The author of CASL Compliance: A Marketer’s Guide to Email Marketing to Canadians, he looks to simplify the implementation of new data management practices within organizations such that they comply with global laws such as GDPR, PIPEDA, CASL, and CCPA, while taking good care of their prospects and customers. He believes making compliance practical makes compliance feasible. Derek is active in the privacy community chairing the Guidance Committee, Canadian Advisory Council – GDPR, co-chair, IAPP Toronto Chapter – 2020/2021, committee member on ISO 31700 – Privacy by Design for Consumer Products, the CEN CENELEC JTC 13 on Cybersecurity and Data Protection and the new Standard Council of Canada’s initiative - Data Governance Standardization Collaborative (DGSC) He is Managing Partner of Newport Thomson, a data & privacy consulting firm based in Toronto. In his volunteer role as Chairman of the Response Marketing Association, he has provided leadership in the area of privacy and marketing. He is also the Publisher of Blazon. Online a curated portal featuring great content for marketers. www.blazon.online Educated in Marketing at University of Toronto, Derek applies creativity to his business strategy while placing a strong emphasis on results. At one point in time, seven of the nine brands handled by his full-service ad agency were #1 in their categories in Canada. Newport Thompson We help organizations become compliant with new data/privacy/email laws in: United States (Can-Spam and California Consumer Protection Act 2018), Canada (CASL and PIPEDA) and European Union (GDPR and ePrivacy Regulation) As the leaders in data & privacy compliance, our Global Data & Privacy Compliance™, a single system service that sets your data & privacy policies and procedures such that the organization is compliant in all jurisdictions. We also offer Canadian Anti Spam Legislation (CASL) compliance. We help identify and change your organization's practices and policies regarding electronic messaging . This law changes the way we use commercial email and SMS text messaging when targeting Canadians. Our way of operating must follow suit. We offer products/ services in the following areas: Review & Gap Reports - for those who wish to do the work themselves and simply have it checked by professionals who have a working understanding of the laws. Full compliance Programs/ Staff Training - for those who simply want to contract the entire task to professionals who can bring them into compliance quickly and efficiently. Certification Programs - approving other’s work with a full audit/certification. Recommending Marketing Automation Technology solutions to track consent status in real time. Email List building within each country - with new rules comes new practices in the area of list building strategies. All services are available in USA, Canada, Europe Background on the CCPA & the Rulemaking Process The California Consumer Privacy Act (CCPA), enacted in 2018, creates new consumer rights relating to the access to, deletion of, and sharing of personal information that is collected by businesses. It also requires the Attorney General to solicit broad public participation and adopt regulations to further the CCPA’s purposes. The proposed regulations would establish procedures to facilitate consumers’ new rights under the CCPA and provide guidance to businesses for how to comply. For more information about the Office of Administrative Law and California’s Rulemaking Process, see Office of Administrative Law - California Code of Regulations. For more information about the CCPA, see Fact Sheet, pdf. Information about the rulemaking process, pdf ___________________________________________ CRM Radio is hosted by Paul Petersen of Goldmine CRM by Ivanti which is a program on the Funnel Radio Channel. GoldMine is the sponsor of CRM Radio.
Torys LLP Privacy Counsel Molly Reynolds and Associate Ronak Shah sit down to discuss the Digital Charter initiative which outlines proposals to modernize Canada’s privacy laws, including the Personal Information Protection and Electronic Documents Act. The pair talk about the Charter's principles that will guide future policy making, how much substance there is behind them and what businesses can expect over the next few years.Music: Stratosphere - www.adamvitovsky.com.
Join host TW Woodward and guest Harri Olkinuora from Norway-based software company Netlife Suite as they discuss GDPR-the General Data Protection Regulation and how government legislation threatens the future of the photo industry. With CCPA (California Consumer Privacy Act) coming into effect in January 2020, consumer privacy and protection have become a critical component of how companies in the United States store and share private data. Host TW Woodward asks the tough questions surrounding government regulation and Harri provides direct experience and real-world examples from the photo industry in Europe.
Roughly 3.5 million Americans are being prescribed or using medical cannabis today. But, how can a person or a medical provider know that what they are using, or prescribing, is the most effective strain for their, or their patient's, treatment plan? In this episode of Hilary Topper On Air, Hilary interviews Stephanie Karasick, Co-Founder & Chief Creative Officer of Strainprint Technologies Ltd., the leading demand-side cannabis data and analytics company. About Stephanie Stephanie was born and raised in the suburbs of Montreal, and left shortly after getting her degree in Graphic Design. She moved to Toronto, working as a copywriter at Leo Burnett, Saatchi & Saatchi, JWT, Taxi, and MacLaren McCann over a span of 15 years. Somewhere in that time, she began studying photography. She also left the corporate world to work as an editorial and family photographer and a mom. The idea for Strainprint came to her after her first few months of using medical cannabis. She was noticing how little information and scientific validation there was on various treatments. Watch Steph's Video About the Interview Stephanie will discuss: The genesis of Strainprint and her story Why the medical cannabis app is important for individuals The importance of medical cannabis data What their data is telling us and why that is important Why continuing to break the stigma of medical cannabis and legitimizing it as a viable therapeutic option is important About Strainprint™ Founded in Toronto in 2016, StrainprintTM Technologies Ltd. is the leading demand-side cannabis data and analytics company. With the world's largest longitudinal, observational dataset of its kind and a mission to advance the scientific understanding of cannabis and its legitimization as a mainstream therapy, Strainprint helps medical cannabis patients and doctors to use cannabis in the most effective and responsible way possible. Strainprint's data platform supports global cannabis research and provides advanced business intelligence and treatment guidance to producers, retailers, medical practitioners, pharmacies, government, and industry. Strainprint is HIPAA, PIPEDA and PHIPA privacy compliant, military-grade encrypted, and all patient data is completely anonymized and at rest in Canada. It can be seamlessly embedded or integrated with most electronic medical records (EMR) and seed2sale software systems. Strainprint Analytics is accessed by customer subscriptions. The Strainprint App is free to patients and can be downloaded from both the iOS App Store and Google Play Store. www.strainprint.ca, Facebook, Twitter, LinkedIn. Strainprint Reports are available at https://strainprint.ca/strainprint-reports/.
Supporting global cannabis research with Noah Kauffman, head of sales for Strainprint. Noah has been helping organizations purchase great software for over a decade. As Director of Sales at Strainprint, he’s responsible for identifying market opportunities and developing sales processes to drive continued revenue growth. Strainprint data is supporting global cannabis research and provides advanced business intelligence to producers, retailers, medical practitioners, pharma, government, and industry. Strainprint is HIPAA, PIPEDA and PHIPA privacy compliant, military-grade encrypted.
October 21, 2019. The day Canada will vote in its 43rd General Election. There is a subject of discussion that will only grow as voting day nears and it isn't about the parties and policy or lack thereof. It's about the integrity of the electoral system. In a digital world with information from everywhere to seemingly everyone, the issue of reliability is not a new question. Integrity of electoral processes around the world have been compromised. There is no disputing this fact. The 2016 US election. The 2018 US midterms. Brexit. France. Austria. Turkey. And right here at home with Electoral Reform referenda, Ontario and Alberta. New shadowy players in a new arena with an awful lot at stake. Canada's current government has done more than most nations recognizing and trying to identify, contain and counter the threat. But surprise surprise, not everyone involved wants to take action. Why? Politics and money. Bill C-76 did a lot to restore rights for voters, limit financial shenanigans and set limits regarding timeframes on advertising and fundraising. But nothing specifically on digital skullduggery. The environment changes rapidly and sources of influence disappear as quickly as they appear. Wiil the extra efforts protect the integrity of the election? The Critical Election Incident Public Protocol (CEIPP) is made up of five senior bureaucrats that will assess threats and determine if they are serious enough to inform Canadians. The Security and Intelligence Threats to Elections (SITE) Task Force consists of CSE, CSIS, RCMP, Global Affairs Canada and the Intelligence Advisor to Government. It is mandated to prevent covert, clandestine or criminal activities from influencing or interfering in the electoral process. Will these measures work? Why weren't political parties made to comply with PIPEDA private information guidelines? Why aren't social media platforms willing to voluntarily comply to C-76? $$
Coming up in this week's episode of the GDPR Weekly Show: An update on the Marriott Hotel data breach, Kent County Council data breach of adoptive parents, GDPR Canada style - a look at PIPEDA, Builder fined for not complying with Subject Access Request
Today on Concierge For Better Living we are joined by Strainprint's VP of Research, Michelle Arbus. Michelle is a veteran of the market research industry with over a decade of experience at the global research firms Ipsos and the NPD Group. While at these organizations, she conducted rigorous data analysis which provided multi-national corporations with data-driven insights and recommendations to solve their business issues. Most recently, Michelle took her analytical expertise to the Ontario Ministry of Health where she consulted on issues such as cannabis, tobacco smoking, routine childhood immunizations, and the flu. She led research which was used as the basis for the strategic direction of programs, initiatives or communications on various health matters. Michelle will be in charge of heading up research efforts at Strainprint, including doing a deep-dive on the rich, 7 million data-points, analyzing the data and creating meaningful reports. Michelle holds a BA Honours in Psychology from York University and an MBA from Dalhousie University. Founded in Toronto in 2016, StrainprintTM Technologies Ltd. is the leading demand-side cannabis data and analytics company. With the world's largest longitudinal, observational data-set of its kind and a mission to advance the scientific understanding of cannabis and its legitimization as a mainstream therapy, Strainprint helps medical cannabis patients and doctors to use cannabis in the most effective and responsible way possible. StrainprintTM data platform supports global cannabis research and provides advanced business intelligence and treatment guidance to producers, retailers, medical practitioners, pharmacies, government, and industry. Strainprint is HIPAA, PIPEDA and PHIPA privacy compliant, military-grade encrypted and all patient data is completely anonymized and at rest in Canada. Strainprint can be seamlessly embedded or integrated with most electronic medical records (EMR) and seed2sale software systems. Strainprint Analytics is accessed by customer subscription.
In today's podcast, we hear that Bleeding Bit flaws leave Wi-Fi access points open to war drivers and other malefactors within a hundred meters of your equipment. US Cyber Command continues its attempts to dissuade foreign influence operations against midterm elections. Social networks have difficulty identifying who's buying ads. Canada's data privacy law takes effect today. GandCrab crooks take a million-dollar bath. And if you go to Soulmates in Google Play, you're looking for love in all the wrong places. Johannes Ullrich from the ISC Stormcast podcast on hiding malware in benign files. Guest is Tara Combs from Alfresco on coming US cyber regulations. For links to all of today's stories check our our CyberWire daily news brief: https://thecyberwire.com/issues/issues2018/November/CyberWire_2018_11_01.html Support our show
On this week's episode of the pod, Hilary Young, Oliver Pulleyblank and Rob Danay discuss: The decision of the 9th circuit court of appeals in the United States to order a new trial on the question of whether Led Zeppelin's "Stairway to Heaven" violates copyright; The apparent decision of Canada's Privacy Commissioner to refer a question to the Federal Courts on whether or not PIPEDA includes a "right to be forgotten;" and The propriety of former Supreme Court judges acting as counsel in their post-judicial careers. In obiter dicta, Hilary talks about the perplexing recent provincial election in New Brunswick, Oliver delivers a sermonic ode to the game of baseball and Rob talks about the unfortunate clash of mountain goats and human beings in the Olympic National Park. We are on Twitter: @stereodecisis And Facebook! And Patreon!
In this special episode we have a freebee from our new privacy officer training course! Important points to remember: Designate a private officer in your business or acknowledge that you are that person. Remember the 10 parts of the PIPEDA: 1. Accountability 2. Identifying purposes 3. Consent 4. Limiting Collection 5. Limiting Use, Disclosure, and Retention 6. Accuracy 7. Safeguards 8. Openness 9. Individual Access 10. Challenging Compliance REGISTER NOW Subscribe to Podcast This podcast has been brought to you by the Electronic Health Information System An electronic medical record designed specifically for allied health professionals. Sign up now and take your private practice paperless. Other Ways to Enjoy this Post Google Play YouTube ITunes
There were a lot of big promises in that 2015 LPC Campaign, weren't there? Such as electoral reform. Such as eliminating the National Energy Board and having new project hearings. Such as a new "relationship" with Indigenous Peoples. Such as "fixing" C-51. See a common theme here? Well, add another one to the growing pile. After promising to renew and replace Canada's 1982 Privacy and Access to Information laws, we get Bill C-58 which amends those 35 year old laws instead of replacing them. Why have corporate media ignored this issue so consistently except for the odd cursory update of its progress on the Order Paper? Why have only the usual suspects of independent media kept it current? TVUH will look at what there is to fear for the mainstream media. The 'consultation' started like they meant business, in the spring of 2016. Stakeholders, academics, expert groups and the Commissioners of Information and Privacy gave input. Then a funny thing happened. Bill C-58 hit the floor of the House on First Reading and effectively ignored all of that consultation. As Suzanne Legault neared the end of her term as Information Commissioner, she repeatedly called out C-58 as inadequate and regressive. Her replacement Caroline Maynard has not changed that position in any real effect. Privacy Commissioner Daniel Therrien has not been a fan of C-58, also using the terms regressive and not helping regarding any current backlogs or deficiencies. Time allocation, wholesale rejection of a lengthy list of Committee amendments and near invisible passage to the Senate is where we are now. Sunny ways, friends. The Red Chamber seems determined to take this bill apart, calling all the same detractors to tell them about its failures. Will it be sent back to the House with huge amendments? Will the threat of Proroguement kill it and many other bills? Would we be better off where C-58 is concerned?
Topics: Secure Framework documents Modifying chromebooks so you can use Debian/Ubuntu Memcached is the new DDoS hotness Announcement of the next BrakeSec Training Class (see Show Notes below for more info) Link to secure framework document: https://drive.google.com/open?id=1xLfY4uI88K2AiA1mosWJ7jFyP100Jv5d Tickets are already on sale for "Hack in the Box" in Amsterdam from 9-13 April 2018, and using the checkout code 'brakeingsecurity' discount code gets you a 10% discount". Register at https://conference.hitb.org/hitbsecconf2018ams/register/ #Spotify: https://brakesec.com/spotifyBDS #RSS: https://brakesec.com/BrakesecRSS #Youtube Channel: http://www.youtube.com/c/BDSPodcast #iTunes Store Link: https://brakesec.com/BDSiTunes #Google Play Store: https://brakesec.com/BDS-GooglePlay Our main site: https://brakesec.com/bdswebsite Join our #Slack Channel! Email us at bds.podcast@gmail.com or DM us on Twitter @brakesec #iHeartRadio App: https://brakesec.com/iHeartBrakesec #SoundCloud: https://brakesec.com/SoundcloudBrakesec Comments, Questions, Feedback: bds.podcast@gmail.com Support Brakeing Down Security Podcast by using our #Paypal: https://brakesec.com/PaypalBDS OR our #Patreon https://brakesec.com/BDSPatreon #Twitter: @brakesec @boettcherpwned @bryanbrake @infosystir #Player.FM : https://brakesec.com/BDS-PlayerFM #Stitcher Network: https://brakesec.com/BrakeSecStitcher #TuneIn Radio App: https://brakesec.com/TuneInBrakesec --Show Notes-- Announcements: Matt Miller’s class on Assembly and Reverse engineering Starts 2 April - 6 sessions 2nd Class - 6 sessions, beginning 21 May Beginner course on Assembly Advanced course, dealing with more advanced topics $150 for each class, or a $250 deal if you sign up for both classes paypal.me/BDSPodcast/150USD - Specify in the NOTES if you want the “Beginner” or “Advanced” course paypal.me/BDSPodcast/250USD - If you want both courses We need a minimum of 10 students per class Projects: Chromebook with Debian Bit of a pain, if I could be honest.. Needed USB hub with eth0, and a USB soundcard USB3 low profile thumbdrives would be better https://www.amazon.com/gp/product/B01K5EBCES/ref=oh_aui_detailpage_o01_s00?ie=UTF8&psc=1 https://www.securecontrolsframework.com/ ←--well well worth the signup https://drive.google.com/open?id=1xLfY4uI88K2AiA1mosWJ7jFyP100Jv5d - ‘secure.xlsx’ http://www.dummies.com/programming/certification/security-control-frameworks/ Numerous security frameworks already exist: Cisco NiST CoBIT ITIL (can be utilized) SWIFT https://www.accesspay.com/wp-content/uploads/2017/09/SWIFT_Customer_Security_Controls_Framework.pdf “My weird path to #infosec” on twitter https://en.wikipedia.org/wiki/Hydrocolloid_dressing
When it comes to privacy, organizations are required to follow federal and provincial legislation which prohibits the use of personal information in an inappropriate or unreasonable manner. As part of the federal private sector, The Personal Information Protection and Electronic Documents Act (PIPEDA) determines proper conduct by organizations throughout Canada. Differently, The Privacy Act covers the personal information handling practices of the federal government itself. Our guest today is Vance Lockton, Senior Analyst for Stakeholder Relations at the Office of the Privacy Commissioner of Canada. Vance explains that the Privacy Commissioner, Daniel Therrien is an officer of Parliament and reports directly to the House of Commons and the Senate, and is independent of the government in place. Vance details the laws in place for debt collectors, how investigations under the Office of the Privacy Commissioner of Canada are conducted and provides advice for listeners for protecting your personal information.