People

Services

Industries

Firm

About

Knowledge

Careers

News

Events

Contact

Connect

Privacy Policy

Disclaimer

Terms of Use

Accessibility

Legal

Calgary

Toronto

Edmonton

Ottawa

Vancouver

New York

Montréal

Ruth E. Promislow

 Data Security and Privacy, Commercial Litigation Lawyer at Bennett Jones Toronto

Partner

Caroline Poirier

Information Technology, Privacy and Data Protection Lawyer at Bennett Jones Montreal

Suzie Suliman

Commercial Transactions Lawyer at Bennett Jones Toronto

Associate, Trademark Agent

Canadian privacy regulators found TikTok improperly collected children&rsquo;s data and lacked valid consent. TikTok will implement new privacy measures, emphasizing stronger protections for youth and transparency under Canadian law.

Joint Privacy Commissioner Investigation of TikTok Key Take Aways

Joint Privacy Commissioner Investigation of TikTok Key Take-Aways

The Office of the Privacy Commissioner of Canada (OPC) issued its findings on August 27, 2025 in connection with an investigation regarding the issue of whether individuals have the right to have information about them de-listed from search engine results.  The OPC found that in limited circumstances, there is such a right where the search results are likely to cause significant harm to an individual, such as a risk of harm to a person's safety or dignity, that outweigh any public interest in that information remaining accessible when searching the individual's name.

Right to Have Your Information De Listed

Right to Have Your Information De-Listed? The Federal Privacy Commissioner Issues Decision

Stephen D. Burns

Technology Lawyer, Intellectual Property Lawyer at Bennett Jones Calgary

Partner, Trademark Agent

J. Sébastien A. Gittens

Intellectual Property and Technology Commercialization Lawyer at Bennett Jones Calgary

On June 17, 2025, the Office of the Privacy Commissioner of Canada (OPC) released a summary of its investigation findings regarding a data breach at 23andMe, which affected nearly 7 million customers, including approximately 320,000 Canadians.

23andMes Data Breach

23andMe's Data Breach: Key Takeaways

Emma Arnold-Fyfe

Commercial Litigation Lawyer at Bennett Jones Vancouver

Associate

When we are retained by clients to guide them through a cyber-attack in which information has been stolen by a threat actor, we almost always find that the client has unnecessarily stored sensitive information far beyond the period for which it required that data. There are two key problems with this approach (or lack thereof) to data retention: (1) in the face of a cyber-attack where criminals steal your information, the organization is incurring unnecessary liability by retaining information it does not need, and (2) when it comes to personal information, retention beyond the required period can itself give rise to regulatory investigation and penalties, and to litigation claims.

Data Spring Cleaning Minimize Your Liability

Data Spring Cleaning: Minimize Your Liability

Katherine Booth

Litigation Lawyer at Bennett Jones Vancouver

Nina Butz

Litigation Lawyer at Bennett Jones Toronto

In RateMDs Inc. v. Bleuler, 2025 BCCA 329, the BC Court of Appeal overturned certification of a proposed privacy class action, finding that the plaintiff's novel claims that use of health professionals' names violated their privacy and amounted to commercial exploitation under provincial privacy statutes were bound to fail.

BC Court of Appeal dismisses proposed privacy class action

BC Court of Appeal Dismisses Proposed Privacy Class Action; Finds Use of Professionals' Names Was Not Commercial Exploitation 

William S. Osler KC

Capital Markets, Securities, M&A and Corporate Governance Lawyer at Bennett Jones Calgary

Denise D. Bright

Public and Private Company Financial Transactions and Securities Lawyer at Bennett Jones Calgary

Partner 

Olu Akinniyi

Articling Student

Recent amendments to Alberta&rsquo;s Securities Act strengthen the Alberta Securities Commission&rsquo;s ability to address financial misinformation and protect investors. Enacted through the Financial Statutes Amendment Act, 2025 (No. 2), the changes expand the definition of forward-looking information and grant the ASC new authority to temporarily halt trading where misleading or inaccurate information is being disseminated. While aimed at curbing harmful online promotion, including by &ldquo;finfluencers,&rdquo; the amendments also have important implications for reporting issuers and their disclosure practices.

Alberta Expands ASC Powers to Address Financial Misinformation

Laura James

Corporate Lawyer at Bennett Jones Vancouver

Rebecca Burnand

Corporate Lawyer at Bennett Jones Calgary

Madison Sutherland

Newly released market data out of the US shows the demand for beauty products remained strong in 2025 despite pressure on overall consumer spending. Beauty M&amp;A deal volume in the US decreased slightly this year due to tariff and trade concerns, but analysts are optimistic for a busier 2026 on the dealmaking front.

Whats Shaping MA in the Beauty Industry

Glow and Grow: What's Shaping M&A in the Beauty Industry

Ethan Z. Schiff

Commercial Litigation Lawyer at Bennett Jones Toronto

Maisah Syed

In David v. Loblaw Companies Limited, the Ontario Court of Appeal confirms that a certification denial for failure to plead a cause of action is final and barred by res judicata. Absent narrow exceptions, plaintiffs cannot amend pleadings to relitigate certification and must pursue an appeal.

Ontario Court of Appeal Says that Plaintiffs Cannot Amend Instead of Appeal

Daron K. Naffin

Energy, Environmental/Regulatory and Expropriation Lawyer at Bennett Jones Calgary

Tim Myers

Regulatory, Environmental, Aboriginal and Expropriation Lawyer at Bennett Jones Calgary

Thomas Machell

Regulatory Lawyer at Bennett Jones Calgary

The Alberta Energy Regulator has released new editions of Directive 071 and Manual 026, significantly expanding emergency preparedness and response requirements. This post outlines the key changes, including mandatory Emergency Management Programs, expanded scope across resource sectors, enhanced hazard analysis standards, and what approval holders should do ahead of the February 2, 2026 effective date.

Tackling Privacy and Cyber-Risks

From the Same Authors