Compliance
Service overview
Assess privacy risks before your project moves forward.
Privacy impact assessments (PIA) in Canada and Quebec under Law 25: AI, sensitive data, new systems and cross-border transfers, led by a multidisciplinary team.
Who it’s for
- Acquiring, developing or redesigning systems that process personal information
- Processing minors', health, biometric or other sensitive data
- Using AI, profiling, surveillance or intensive monitoring
- Transferring personal information outside Quebec or Canada
What it does
- 1
Scope the project, data and legal requirements
- 2
Map collection, use, access, retention and disclosure
- 3
Assess impacts and recommend proportionate safeguards
- 4
Deliver a prioritized action plan with live progress tracking
Why work with us
Our assessments combine legal, privacy and cybersecurity expertise in one team. You get an interactive dashboard, clear priorities and documented decisions that hold up to regulators, clients and partners.
Case study / POC
Launching an AI feature that uses customer health data
- Situation
- A software company plans an AI assistant that summarizes customer files, some containing health information, processed by a US cloud provider.
- Approach
- The team maps the data, checks Law 25 requirements for sensitive data and transfers outside Quebec, and works through each risk on an interactive platform with product and security leads.
- Outcome
- The feature launches with minimized data, a documented transfer assessment and a short action plan the product team can follow and report on.
Illustrative scenario, not a completed client engagement.
Related areas of expertise
Privacy & Data Protection
Privacy law compliance under PIPEDA, Quebec Law 25 and provincial rules, with practical privacy programs for personal information.
Governance, Risk & Compliance (GRC)
GRC services including third-party risk management, legislative gap assessments, compliance programs and policies aligned with Canadian regulations.
Related industries
SaaS & Software Development
Bring products to market with practical support for SaaS agreements, software licensing, privacy and customer requirements.
View industryNonprofits & Public Institutions
Advance your mission with legal guidance on data protection, technology procurement and accountable digital transformation.
View industryProperty Insurance
Navigate privacy, cybersecurity and technology risks across underwriting, claims operations and service-provider relationships.
View industry
Insights & perspectives
Advisors for this service
Connect with our legal and technical professionals to discuss your organization’s needs.
