Privacy & Data Protection | Canada

Osler, Hoskin & Harcourt maintains a highly regarded privacy and data management group. It serves a broad client base, advising several high-profile banks as well as tech, retail and hospitality companies in the digital marketing space on privacy and anti-spam issues. The firm also assists with regulatory concerns, data processing matters and security incidents. It is regularly mandated by high-profile private sector organisations to advise on data governance and contentious privacy issues, and is increasingly experienced in the emerging data ethics and big data spaces. Osler is highly rated for its innovation and commitment to practice development and policy discussion via its celebrated AccessPrivacy platform.

Borden Ladner Gervais operates an esteemed privacy and data protection practice which advises several high-profile public and private sector clients. In addition to providing guidance on Canadian law, the team is also well placed to advise on US and EU perspectives. The firm frequently assists corporate clients with cybersecurity issues, privacy policies, data analytics and data protection due diligence. BLG is particularly active on behalf of clients in the technology, education, transportation, healthcare and financial services industries.

Dentons is renowned for its deep regulatory knowledge in the field of privacy and data protection. It ably assists with data governance and e-commerce matters including anti-spam, cybersecurity and marketing to children. Its privacy and data protection group is regularly active on behalf of clients operating in the automotive, technology and fintech sectors, who benefit from Dentons' global resources on a variety of cross-border matters. The Dentons Canada team is experienced in sensitive data breach litigation and also increasingly proficient in privacy issues concerning new technologies such as facial recognition and autonomous vehicles.

Fasken has a strong regulatory practice in Canada which is recognised for its experience in freedom of information matters and privacy compliance. The firm frequently acts for insurance companies and public sector clients. It operates a highly regarded cybersecurity practice with notable expertise in incident response, risk management and cyber insurance. The team is also experienced in acting on privacy breach class action proceedings before all levels of court. It is increasingly engaged on mandates involving data transfer and storage issues, as well as innovative data capture proposals.

Bennett Jones is a go-to counsellor on privacy and data security issues for clients across a range of sectors including technology, energy, financial services, retail and hospitality. The team frequently counsels clients on regulatory matters, as well as assisting with privacy class actions and incident response. The firm offers nationwide coverage, with offices in Calgary, Edmonton, Ottawa, Toronto and Vancouver.

Blake, Cassels & Graydon is recognised for its work advising major national and multinational organisations on Canadian regulatory compliance, and the development and implementation of data management programmes and cyber-risk strategies. The firm also acts as defence counsel in class actions and regularly advises on privacy issues ancillary to mergers. In the privacy space it represents clients hailing from a broad range of sectors, including heavily regulated industries such as healthcare, foods, financial services and energy.

McCarthy Tétrault's privacy practice advises several well-known Canadian and international clients on a variety of issues within this space. The firm is highly experienced in acting as defence counsel in privacy-related class actions and is also regularly called upon to advise on matters arising from cybersecurity breaches. Outside the contentious sphere, McCarthy is also well versed in negotiating master data sharing agreements as well as providing guidance on issues of privacy legislation.

Ontario-based firm nNovation offers skilled practitioners handling high-level privacy issues. The team advises an impressive roster of clients from the technology, healthcare, real estate and retail sectors. The firm offers a comprehensive privacy and data security practice, from designing compliance programmes to assisting with data security breaches.

Norton Rose Fulbright is a full-service global firm with a wealth of experience undertaking privacy and data protection mandates. It is a strong choice for handling cybersecurity incident response in addition to providing privacy compliance counsel. The firm frequently assists clients in the healthcare sector, in addition to those in the technology, financial services, telecommunications, retail and energy industries.

Torys fields an impressive privacy and data protection practice, which sees the firm frequently counsel clients on incident responses, class actions and regulatory compliance. The firm offers broad geographic coverage with offices in Toronto, Montréal and Halifax. The team also offers notable experience in cyber insurance. Clients from a wide range of sectors, including financial services, telecommunications, technology and life sciences, seek out Torys' privacy expertise.