With the groundbreaking US adequacy decision, Canadian businesses need to aware of how EU personal data transfers to the US will impact them. This is a summary detailing what the adequacy decision means for Canadian businesses.

Determining the lawful basis for processing personal data can, at times, be confusing as the six lawful bases outlined in the GDPR can be interpreted (or manipulated) to make it fit for purpose. You can no longer avoid seeking consent to process personal data by simply including it in a contract.