CASL Enforcement Decision — Interpretive Guidance for Compliance and Penalties

On October 19, 2017, the Canadian Radio-television and Telecommunications Commission issued Compliance and Enforcement Decision CRTC 2017-368 in a contested enforcement proceeding, imposing a $200,000 penalty on Compu.Finder for violating Canada’s Anti-Spam Legislation (commonly known as “CASL”) by sending 317 commercial emails without the recipients’ consent and in some instances without a compliant unsubscribe mechanism. […] Read more


G-7 Guidelines for Cybersecurity Assessment

On October 13, 2017, the Group of Seven countries, including Canada, the United Kingdom and the United States (the “G-7”), issued a report titled G-7 Fundamental Elements for Effective Assessment of Cybersecurity in the Financial Sector (the “G7FEA”) to provide guidance for effective cybersecurity assessments by financial sector organizations. The G7FEA supplements the G-7’s 2016 report titled G7 […] Read more

Legal News

Cybersecurity Guidance from Canadian Securities Administrators

On October 19, 2017, the Canadian Securities Administrators (“CSA”) published Staff Notice 33-321 Cyber Security and Social Media to report on a survey of cybersecurity and social media practices by firms registered to trade securities or to advise clients regarding securities, and to provide guidance regarding cybersecurity and social media practices. The Staff Notice supplements the CSA’s […] Read more


Demers v. Yahoo Inc: Québec Court Confirms that Québec Consumer Law Applies to Free Online Services

In a September 19, 2017 decision in Demers v Yahoo! Inc., the Québec Superior Court rejected Yahoo! Inc. and Yahoo! Canada Co.’s (collectively, “Yahoo”) motion to dismiss a motion for authorization of a class action resulting from two highly publicized data security incidents that occurred in 2013 and 2014. This decision has important implications for […] Read more