August 22, 2019: Recently ACA submitted our comments to the Office of the Privacy Commissioner (OPC) on cross border data flows.

The OPC used its ruling on the Equifax breech as a departure point for consultations with respect to the need to gather consent for cross border data transfers.

The industry is unanimous that this new interpretation of PIPEDA is a dramatic over reach by the OPC.

The key points of our submission are:

  • Interpretation of the word “transfer” as a “disclosure” which has implications downstream on marketer’s data relationships
  • Questioning how marketers would provide notice of “the associated risks” of a transborder data flow
  • The risk of consent requirements becoming so long that consent becomes meaningless

Read submission

For more information contact me.


Chris Williams
VP Digital
/ 416-964-1538