Cross Border Transfer of Personal Data Laws of Canada

Authors

  • Assist.prof. Veena Anusornsena, Ph.D. School of Law, University of the Thai Chamber of Commerce

Keywords:

Personal Data, EU Adequacy Decision, EU

Abstract

Canada has long enforced Personal Data Protection laws, even before many other countries became aware of the need to implement such laws and regulations. It is also one of the countries recognized by the European Union as having a level of personal data protection that is equivalent to EU standards (EU Adequacy Decision), allowing for the transfer of personal data from businesses within the EU to Canada.

References

Office of the Privacy Commissioner of Canada. (n.d.). Fact sheet: The Digital Privacy Act—Summary of key changes to the Personal Information Protection and Electronic Documents Act (PIPEDA). Retrieved July 13, 2024, from https://www.priv.gc.ca

Office of the Privacy Commissioner of Canada. (n.d.). For businesses. https://www.priv.gc.ca/en/for-businesses/

Government of Canada, Justice Laws Website. (n.d.). Schedule 1: Principles set out in the National Standard of Canada entitled Model Code for the Protection of Personal Information, CAN/CSA-Q830-96. https://laws-lois.justice.gc.ca/eng/acts/P-8.6/page-7.html#h-417659

Office of the Privacy Commissioner of Canada. (2009). Guidelines for processing personal data across borders. https://www.priv.gc.ca/en/privacy-topics/airports-and-borders/gl_dab_090127/

Fraser, D. (2022). Canada’s new Consumer Privacy Protection Act (CPPA): 12 PIPEDA differences published. McInnes Cooper. https://www.mcinnescooper.com/publications/canadas-new-consumer-privacy-protection-act-cppa-12-pipeda-differences/

Koczerginski, M. (2024). Privacy on ice: Canada maintains GDPR adequacy status despite frozen privacy reforms. McMillan LLP. https://mcmillan.ca/insights/publications/privacy-on-ice-canada-maintains-gdpr-adequacy-status-despite-frozen-privacy-reforms/

European Commission. (2002). Commission Decision 2002/2/EC of 20 December 2001 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documents Act. https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32002D0002

European Commission. (2024). Report from the Commission to the European Parliament and the Council on the first review of the functioning of the adequacy decisions adopted pursuant to Article 25(6) of Directive 95/46/EC. https://commission.europa.eu/system/files/2024-01/JUST_template_comingsoon_Report%20on%20the%20first%20review%20of%20the%20functioning.pdf

Published

2025-06-01

How to Cite

Anusornsena, V. (2025). Cross Border Transfer of Personal Data Laws of Canada. UTCC Law Journal, 17(1), 30–43. retrieved from https://so20.tci-thaijo.org/index.php/utcclawjo/article/view/728

Issue

Section

Academic Article