CLOUD COMPUTING & THE PATRIOT ACT: A RED HERRING?
|
|
- Tracy Bailey
- 8 years ago
- Views:
Transcription
1
2 CLOUD COMPUTING & THE PATRIOT ACT: A RED HERRING? Lindsey Finch Senior Global Privacy Counsel Salesforce.com lfinch@salesforce.com David T.S. Fraser Partner McInnes Cooper David.fraser@mcinnescooper.com
3 CLOUD COMPUTING & THE PATRIOT ACT: A RED HERRING? I. Brief Overview of Cloud Computing II. Cloud Computing & Privacy A. Privacy Issues B. Privacy Benefits III. Cloud Computing & Jurisdictional Concerns A. Patriot Act B. Canadian Laws Akin to the Patriot Act C. Information Sharing Amongst Governments D. Myths & Realities IV. Practical Response A. Returning to First Principles B. Checklist for Service Provider Contracts
4 BRIEF OVERVIEW OF CLOUD COMPUTING Definition of Cloud Computing Oftentimes debated and little consensus Distributed computing architecture in which data and applications reside on servers separate from the user and are accessed via the Internet Applications and data are generally accessible from anywhere, provided you have an Internet connection Low cost of administration, scalable, greener Subscription-based, pay-as-you-go license User with Internet Access Remote Data Center Data entered by user is sent to data center for storage/processing and returned to user through an Internet browser interface
5 BRIEF OVERVIEW OF CLOUD COMPUTING Applications Moving to the Cloud 1960 s Mainframe 1980 s Client/server Today Cloud Computing Applications Platforms Moving to the Cloud 1960 s Mainframe 1980 s Client/server Today Cloud Computing Platforms
6 BRIEF OVERVIEW OF CLOUD COMPUTING Consumer versus Enterprise Offerings Consumer Offerings Oftentimes free of charge Almost always have take-it-or-leave-it terms of service Terms of service may be subject to change Provider may use customer data for advertising, other purposes to monetize offering Enterprise Offerings Typically charge a fee Sometimes terms of service are subject to negotiation Terms of service typically cannot be unilaterally changed Provider typically does not use customer data for purposes beyond providing the services
7 CLOUD COMPUTING & THE PATRIOT ACT: A RED HERRING? I. Brief Overview of Cloud Computing II. Cloud Computing & Privacy A. Privacy Issues B. Privacy Benefits III. Cloud Computing & Jurisdictional Concerns A. Patriot Act B. Canadian Laws Akin to the Patriot Act C. Information Sharing Amongst Governments D. Myths & Realities IV. Practical Response A. Returning to First Principles B. Checklist for Service Provider Contracts
8 CLOUD COMPUTING & PRIVACY Privacy Issues Control Does the provider claim ownership rights in customer data? Does the provider only use customer data as their customers instruct them or to fulfill their contractual or legal obligations? Does the provider only disclose customer data as required by law and, to the extent permitted by law, provide customers with prior notification of any such compelled disclosure? Data Location/Transfers Where are data centers located? Security Does the provider adhere to internationally-accepted security standards, such as the ISO framework? Does the provider have regular, third-party, independent audits of its security program? Negotiable contracts? Will the provider negotiate customer contracts?
9 BRIEF OVERVIEW OF CLOUD COMPUTING Benefits of Cloud Computing Professional Management More secure data centers More operational controls around data access More security resources Better auditability Data is not easily lost Single code base for remediating vulnerabilities One fix can benefit all customers simultaneously Sum of customer requirements benefit all customers Customers across multiple geographies, industries impose requirements on provider Same services used for all customers mean all customers benefit from each other s requirements
10 CLOUD COMPUTING & THE PATRIOT ACT: A RED HERRING? I. Brief Overview of Cloud Computing II. Cloud Computing & Privacy A. Privacy Issues B. Privacy Benefits III.Cloud Computing & Jurisdictional Concerns A. Patriot Act B. Canadian Laws Akin to the Patriot Act C. Information Sharing Amongst Governments D. Myths & Realities IV. Practical Response A. Returning to First Principles B. Checklist for Service Provider Contracts
11 Patriot Act: Overview of Law Brief History Signed into law on October 26, 2011 in response to the terrorist attacks against the U.S. on September 11, 2011 Amended existing laws governing intelligence activities Focus of Law Permit information-gathering related to matters of national security, particularly to combat world-wide terrorism and financing thereof Controversial Aspects Intelligence, surveillance, and information collection tools have been expanded Procedural hurdles for using such tools have been reduced Protections Embedded Involvement by all three branches of government in all instances Attempt to balance national security concerns with privacy rights
12 Issues for Canadians: Expanded Rights of U.S. Government Expands law enforcement and intelligence agencies surveillance and investigative powers Certain provisions prohibit recipient of order to reveal the order s existence, except to legal counsel Powers of surveillance and search/seizure extend to records of Canadians Powers could extend to records in the custody of US companies in Canada Canadian subsidiaries of US companies Canadian companies with US presence
13 Canadian Response to Patriot Act British Columbia British Columbia Government Employees Union (BCGEU) launched Right to Privacy Campaign (May 10, 2004)
14 Canadian Response to Patriot Act BC Commissioner s Inquiry Information and Privacy Commissioner of BC began inquiry into the Patriot Act and British Columbians privacy Spring 2004 Particularly focused on s. 215 secret court orders permitting seizure of any tangible thing Received over 500 submissions, including from the FBI and the U.S. service provider of BCGEU BC FOIPPA Amendments Before final Commissioner report, BC government introduced amendments to the BC Freedom of Information and Protection of Privacy Act Passed on October 19, 2004 Applicable to public sector bodies Wide prohibition against disclosures of personal information outside of Canada
15 Canadian Response to Patriot Act Alberta s Protection of Personal Information Act Applicable to private sector organisations 92(3) A person must not wilfully disclose personal information to which this Act applies pursuant to a subpoena, warrant or order issued or made by a court, person or body having no jurisdiction in Alberta to compel the production of information or purusant to a rule of court that is not binding in Alberta 92(4) A person who contravenes subsection (3) is guilty of an offence and liable (1)in the case of an individual, to a fine of not less than $2,000 and not more than $10,000, and (2)in the case of an other person, to a fine of not less than $200,000 and not more than $500,000
16 Canadian Response to Patriot Act Nova Scotia s Personal Information International Disclosure Protection Act Applicable to public sector bodies General rule: Personal information must be stored in Canada and accessed only from Canada General exceptions: Consent of the individual in the prescribed form Permitted disclosure under the Act Storage or access permitted by head of the public body Exceptions that may be granted by head of public body Head of public body can permit storage or access outside of Canada if the head considers the storage or access is to meet the necessary requirements of the public body s operation Head can impose restrictions and conditions Head must report all such decisions to the Minister within 90 days of the end of the relevant year
17 Canadian Response to Patriot Act Nova Scotia s Personal Information International Disclosure Protection Act Section 9(3) Law enforcement Public body that is a law enforcement agency may disclose personal information to (a) another law enforcement agency in Canada; or (b) a law enforcement agency in a foreign country under an arrangement, a written agreement, a treaty or an enactment of the Province, the Government of Canada or the Parliament Section 9(4) Electronic devices The head of a public body may allow a director, officer or employee of the public body to transport personal information outside Canada temporarily if the head consider it is necessary for the performance of the duties of the director, officer or employee to transport the information in a computer, a cell phone or another mobile electronic device
18 Canadian Response to Patriot Act Personal Information and Protection of Electronic Documents Act (PIPEDA) Applicable to private sector organizations except where there is a substantially similar provincial law Permits transfers of personal information outside of Canada when certain conditions are met Principle of Schedule 1 An organization is responsible for personal information in its possession or custody, including information that has been transferred to a third party for processing. The organization shall use contractual or other means to provide a comparable level of protection while the information is being processed by a third party.
19 Canadian Response to Patriot Act Office of the Privacy Commissioner s Processing Personal Data Across Borders Guidelines Published in January 2009 Clearly sets forth conditions under which personal information may be transferred outside of Canada for processing purposes in compliance with PIPEDA
20 Canadian Laws Akin to the Patriot Act Anti-terrorism Act Passed by parliament and became law on December 24, 2001 Amended a range of statutes, including Criminal Code Canadian Security Intelligence Service Act (CSIS Act) National Defence Act
21 Canadian Laws Akin to the Patriot Act Interception of Interception of in transit would require a wiretap order under the Criminal Code, CSIS Act or ministerial authorization under the National Defence Act Access to an in storage would require a search warrant or production order under the Criminal Code or under the CSIS Act
22 Canadian Laws Akin to the Patriot Act CSIS Act Allows secret order from secret court (specially designated judges from the Federal Court) Allows a secret warrant authorizing Interception of communication Obtaining any information, record, document or thing Can obtain these by Entering any place Searching, removing and examining any thing To install, maintain or remove any thing
23 Canadian Laws Akin to the Patriot Act National Defence Act Provisions added by the Anti-terrorism Act refer to the Communications Security Establishment (the Canadian NSA) Minister (not court) can authorize interception, for the purpose of foreign intelligence, of private communications directed at foreign entities located outside of Canada Note: foreign intelligence means information or intelligence about the capabilities, intentions or activities of a foreign individual, state, organization, or terrorist group, as they relate to international affairs, defence or security
24 Information Sharing Amongst Government Canadian and US intelligence agencies share vast amounts of information Mutual legal assistance treaties (MLATs) allow Canadian authorities to get warrants for US authorities, and vice versa Arrangement exist for informal sharing related to targets of mutual interest Canadian authorities can get information in the US without a warrant and American authorities can get information in Canada without a warrant
25 Myths & Realities: How are Canadian Laws Different than the Patriot Act? Reality: most of the provisions of the Patriot Act are mirrored in Canadian law Reality: Canada has a secret court that allows ex parte applications for warrants, including sneak and peak warrants Reality: Canada has warrantless wiretap powers for international communications, same as in the US Reality: There is a huge degree of cooperation between Canadian and US authorities, both formal and informal
26 CLOUD COMPUTING & THE PATRIOT ACT: A RED HERRING? I. Brief Overview of Cloud Computing II. Cloud Computing & Privacy A. Privacy Issues B. Privacy Benefits III. Cloud Computing & Jurisdictional Concerns A. Patriot Act B. Canadian Laws Akin to the Patriot Act C. Information Sharing Amongst Governments D. Myths & Realities IV. Practical Response A. Returning to First Principles B. Checklist for Service Provider Contracts
27 Returning to First Principles 1. Original data custodian remains accountable 2. Original data custodian should make informed choices about service providers 3. Original data custodial should take a risk-based approach 4. Most Canadian laws permit cross-border transfers
28 Checklist for Service Provider Contracts Ownership Ensure the cloud provider claims no ownership right in customer data Use Ensure the cloud provider only use customer data as instructed by its respective customers or to fulfill the provider s contractual or legal requirements Disclosure Ensure the cloud provider only discloses customer data where required by law and, to the extent permitted by law, provides prior notification of compelled disclosure to the impacted customer Security Ensure the cloud provider maintains a robust security management system based on an internationally accepted security framework (such as ISO 27002) Ensure the cloud provider offers a selection of security features to implement in its customers usage of cloud services Audit Ensure the cloud provider uses independent, third-party auditors to ensure compliance with its security management system Data Location Ensure the cloud provider will specify the country(ies) in which customer data will be stored Breach Notification Ensure the cloud provider will promptly notify customers of known security breaches that affect the confidentiality or integrity of their respective customer data.
29 THANK YOU Lindsey Finch Senior Global Privacy Counsel Salesforce.com David T.S. Fraser Partner McInnes Cooper
The cloud thing: Privacy and cloud computing
The cloud thing: Privacy and cloud computing David T.S. Fraser (david.fraser@mcinnescooper.com / @privacylawyer) University of New Brunswick July 2011 Disclaimer What follows are the views of the author
More informationInsights and Commentary from Dentons
dentons.com Insights and Commentary from Dentons On March 31, 2013, three pre-eminent law firms Salans, Fraser Milner Casgrain, and SNR Denton combined to form Dentons, a Top 10 global law firm with more
More informationINFORMATION SECURITY GUIDE. Cloud Computing Outsourcing. Information Security Unit. Information Technology Services (ITS) July 2013
INFORMATION SECURITY GUIDE Cloud Computing Outsourcing Information Security Unit Information Technology Services (ITS) July 2013 CONTENTS 1. Background...2 2. Legislative and Policy Requirements...3 3.
More informationProtecting Saskatchewan data the USA Patriot Act
Protecting Saskatchewan data the USA Patriot Act Main points... 404 Introduction... 405 Standing Committee on Public Accounts motion... 405 Our response to the motion... 405 ITO, its service provider,
More informationThe USA Patriot Act Government Briefing. Kirsten Tisdale, Chris Norman, Sharon Plater & Alexandra (Gina) Henley September 30, 2004
The USA Patriot Act Government Briefing Kirsten Tisdale, Chris Norman, Sharon Plater & Alexandra (Gina) Henley September 30, 2004 Agenda Background Overview of Government Responses and Approach Mitigation
More informationTransferring Personal Information about Canadians Across Borders Implications of the USA PATRIOT Act
Office of the Commissariat Privacy Commissioner à la protection de of Canada la vie privée du Canada Transferring Personal Information about Canadians Across Borders Implications of the USA PATRIOT Act
More informationCloud Computing: Trust But Verify
Cloud Computing: Trust But Verify 14th Annual Privacy and Security Conference February 8, 2013, Victoria Martin P.J. Kratz, QC Bennett Jones LLP Cloud Computing Provision of services available on the Internet
More informationPrivacy Law in Canada
Privacy Law in Canada Federal and provincial privacy legislation has a profound impact on the way virtually all organizations carry on business across the country. Canada s privacy laws, while likely the
More informationSPECIAL ISSUES IN CANADIAN IT OUTSOURCING BY C. IAN KYER AND JOHN BEARDWOOD
SPECIAL ISSUES IN CANADIAN IT OUTSOURCING BY C. IAN KYER AND JOHN BEARDWOOD INTRODUCTION For an American service provider, doing an outsourcing in Canada is like a fan of the National League Chicago Cubs
More informationCloud Computing: Privacy and Other Risks
December 2013 Cloud Computing: Privacy and Other Risks by George Waggott, Michael Reid and Mitch Koczerginski, McMillan LLP Introduction While the benefits of outsourcing organizational data storage to
More informationCANADIAN PRIVACY AND DATA RESIDENCY REQUIREMENTS. White Paper
CANADIAN PRIVACY AND DATA RESIDENCY REQUIREMENTS White Paper Table of Contents Addressing compliance with privacy laws for cloud-based services through persistent encryption and key ownership... Section
More informationSUBMISSION TO THE SPECIAL COMMITTEE TO REVIEW TRANSBORDER DATA FLOWS AND THEIR REGULATION THE FREEDOM OF INFORMATION AND PROTECTION OF PRIVACY ACT
SUBMISSION TO THE SPECIAL COMMITTEE TO REVIEW THE FREEDOM OF INFORMATION AND PROTECTION OF PRIVACY ACT TRANSBORDER DATA FLOWS AND THEIR REGULATION Authored by Kris Klein from the Law Office of Kris Klein,
More informationData Management: Considerations for Integrating Compliance Requirements At Home and Abroad. Toronto, Ontario June 14, 2005
Data Management: Considerations for Integrating Compliance Requirements At Home and Abroad Toronto, Ontario June 14, 2005 Outsourcing Update: New Contractual Options and Risks Lisa K. Abe June 14, 2005
More informationPrivacy Matters. The Federal Strategy to Address Concerns About the USA PATRIOT Act and Transborder Data Flows
Privacy Matters The Federal Strategy to Address Concerns About the USA PATRIOT Act and Transborder Data Flows Her Majesty the Queen in Right of Canada, represented by the President of the Treasury Board,
More informationCommittee on Civil Liberties, Justice and Home Affairs - The Secretariat - Background Note on
Committee on Civil Liberties, Justice and Home Affairs - The Secretariat - Background Note on US Legal Instruments for Access and Electronic Surveillance of EU Citizens Introduction This note presents
More informationPrivacy Law in Canada
by PATRICIA WILSON & MICHAEL FEKETE Protection of personal information remains at the forefront of public policy debate in. Federal and provincial privacy legislation has a profound impact on the way virtually
More informationCLOUD COMPUTING FOR SMALL- AND MEDIUM-SIZED ENTERPRISES:
CLOUD COMPUTING FOR SMALL- AND MEDIUM-SIZED ENTERPRISES: Privacy Responsibilities and Considerations Cloud computing is the delivery of computing services over the Internet, and it offers many potential
More informationPolicy Brief: Protecting Privacy in Cloud-Based Genomic Research
Policy Brief: Protecting Privacy in Cloud-Based Genomic Research Version 1.0 July 21 st, 2015 Suggested Citation: Adrian Thorogood, Howard Simkevitz, Mark Phillips, Edward S Dove & Yann Joly, Policy Brief:
More informationProudly Presents. Navigating the Cloud Across the US & Canada Border
Proudly Presents Navigating the Cloud Across the US & Canada Border Presenters Rob Groves, B.A., M.B.A., Director, Finance and Business Services, Calgary Catholic School District Rob Groves is the Director,
More informationThe Use of Cloud Computing for the Storing and Accessing of Client Information: Some Practical and Ethical Considerations
The Use of Cloud Computing for the Storing and Accessing of Client Information: Some Practical and Ethical Considerations Jeffrey D. Scott Jeffrey D. Scott, Legal Professional Corporation Practice Advisors
More informationDrawing Lines in the Cloud: Jurisdictional Access to Data. Nancy Libin Mary Ellen Callahan
Drawing Lines in the Cloud: Jurisdictional Access to Data Nancy Libin Mary Ellen Callahan OVERVIEW Introduction to Cloud Computing Definition Benefits and Risks How does the physical location of data or
More informationLegal Project Management: A Tool for Corporate Counsel Topic #1
Legal Project Management: A Tool for Corporate Counsel Topic #1 Ann Marie McDonald, PMP CCCA, NB Chapter, Law Firm Series, Part III November 30, 2012 Definitions Project : A temporary endeavour undertaken
More informationTable of Contents. Background... 1. The Complaint...2 The Investigative Process...3. Issues Arising from the Investigation... 3. Discussion...
Table of Contents Background... 1 The Complaint...2 The Investigative Process...3 Issues Arising from the Investigation... 3 Discussion... 4 Issue 1: Is the information in question personal information
More informationPROVINCIAL CANADIAN GEOGRAPHIC RESTRICTIONS ON PERSONAL DATA IN THE PUBLIC SECTOR
PROVINCIAL CANADIAN GEOGRAPHIC RESTRICTIONS ON PERSONAL DATA IN THE PUBLIC SECTOR Submitted to the Trilateral Committee on Transborder Data Flows Fred H. Cate Copyright 2008 Fred H. Cate The Centre for
More informationUsing AWS in the context of Australian Privacy Considerations October 2015
Using AWS in the context of Australian Privacy Considerations October 2015 (Please consult https://aws.amazon.com/compliance/aws-whitepapers/for the latest version of this paper) Page 1 of 13 Overview
More informationMICROSOFT OFFICE 365 PRIVACY IMPACT ASSESSMENT. Western Student E-Communications Outsourcing
MICROSOFT OFFICE 365 PRIVACY IMPACT ASSESSMENT Western Student E-Communications Outsourcing Paul Eluchok - University Privacy Officer David Ghantous - Associate Director of Technical Services Dated: August
More informationCOUNCIL OF THE EUROPEAN UNION. Brussels, 22 November 2006 15644/06 DATAPROTECT 45 EDPS 3
COUNCIL OF THE EUROPEAN UNION Brussels, 22 November 2006 15644/06 DATAPROTECT 45 EDPS 3 COVER NOTE from: Secretary-General of the European Commission, signed by Mr Jordi AYET PUIGARNAU, Director date of
More informationDoing Business. A Practical Guide. casselsbrock.com. Canada. Dispute Resolution. Foreign Investment. Aboriginal. Securities and Corporate Finance
About Canada Dispute Resolution Forms of Business Organization Aboriginal Law Competition Law Real Estate Securities and Corporate Finance Foreign Investment Public- Private Partnerships Restructuring
More informationPERSONAL INFORMATION PROTECTION ACT
Province of Alberta Statutes of Alberta, Current as of December 17, 2014 Office Consolidation Published by Alberta Queen s Printer Alberta Queen s Printer 7 th Floor, Park Plaza 10611-98 Avenue Edmonton,
More informationCloud Computing: Legal Risks and Best Practices
Cloud Computing: Legal Risks and Best Practices A Bennett Jones Presentation Toronto, Ontario Lisa Abe-Oldenburg, Partner Bennett Jones LLP November 7, 2012 Introduction Security and Data Privacy Recent
More informationSASKATCHEWAN OFFICE OF THE INFORMATION AND PRIVACY COMMISSIONER INVESTIGATION REPORT F-2012 003. Saskatchewan Workers Compensation Board
Date: August 29, 2012 File No.: 2008/101 SASKATCHEWAN OFFICE OF THE INFORMATION AND PRIVACY COMMISSIONER INVESTIGATION REPORT F-2012 003 Saskatchewan Workers Compensation Board Summary: The Commissioner
More informationCloud Computing: Privacy & Jurisdiction from a Canadian Perspective
Cloud Computing: Privacy & Jurisdiction from a Canadian Perspective Professor Michael Geist Canada Research Chair in Internet and E-commerce Law University of Ottawa, Faculty of Law Cloud Computing - Canada
More informationIndex All entries in the index reference page numbers.
Index All entries in the index reference page numbers. A Audit of organizations, 37-38, Access to personal information 162-163 by individual, 22, 31, 151-154 B assistance by organization, Biometrics, 123-125
More informationTEACHERS ACT [SBC 2011] Chapter 19. Contents PART 1 - DEFINITIONS
[SBC 2011] Chapter 19 Contents 1 Definitions PART 1 - DEFINITIONS PART 2 COMMISSIONER AND DIRECTOR OF CERTIFICATION 2 Appointment of commissioner 3 Commissioner s power to delegate 4 Recommendations about
More informationFinancial Advisers (Amendment) Bill
Financial Advisers (Amendment) Bill Bill No. 15/2015. Read the first time on 11 May 2015. A BILL intituled An Act to amend the Financial Advisers Act (Chapter 110 of the 2007 Revised Edition). Be it enacted
More informationCrimes (Computer Hacking)
2009-44 CRIMES (COMPUTER HACKING) ACT 2009 by Act 2011-23 as from 23.11.2012 Principal Act Act. No. 2009-44 Commencement except ss. 15-24 14.1.2010 (LN. 2010/003) Assent 3.12.2009 Amending enactments Relevant
More informationThe Credit Reporting Act
1 CREDIT REPORTING c. C-43.2 The Credit Reporting Act being Chapter C-43.2 of The Statutes of Saskatchewan, 2004 (effective March 1, 2005). NOTE: This consolidation is not official. Amendments have been
More informationCloud Computing Contracts. October 11, 2012
Cloud Computing Contracts October 11, 2012 Lorene Novakowski Karam Bayrakal Covering Cloud Computing Cloud Computing Defined Models Manage Cloud Computing Risk Mitigation Strategy Privacy Contracts Best
More informationHow To Ensure Health Information Is Protected
pic pic CIHI Submission: 2011 Prescribed Entity Review October 2011 Who We Are Established in 1994, CIHI is an independent, not-for-profit corporation that provides essential information on Canada s health
More informationPIPEDA and Online Backup White Paper
PIPEDA and Online Backup White Paper The cloud computing era has seen a phenomenal growth of the data backup service industry. Backup service providers, by nature of their business, are compelled to collect
More informationTaking care of what s important to you
A v i v a C a n a d a I n c. P r i v a c y P o l i c y Taking care of what s important to you Table of Contents Introduction Privacy in Canada Definition of Personal Information Privacy Policy: the ten
More informationQUESTERRE ENERGY CORPORATION (the Corporation ) INSIDER TRADING AND REPORTING POLICY
QUESTERRE ENERGY CORPORATION (the Corporation ) INSIDER TRADING AND REPORTING POLICY The purpose of this insider policy is to summarize the insider trading restrictions to which directors, officers, consultants
More informationE-COMMERCE GOES MOBILE: SEEKING COMPETITIVENESS THROUGH PRIVACY
E-COMMERCE GOES MOBILE: SEEKING COMPETITIVENESS THROUGH PRIVACY Oana Dolea 7 th Annual Leg@l.IT Conference March 26th, 2013 Montreal, Canada INTRODUCTION Mobile e-commerce vs. E-commerce Mobile e-commerce:
More informationInterjurisdictional Support Orders Act
Interjurisdictional Support Orders Act CHAPTER 9 OF THE ACTS OF 2002 as amended by 2002, c. 30, s. 9; 2012, c. 24; 2012, c. 62 2013 Her Majesty the Queen in right of the Province of Nova Scotia Published
More informationBERMUDA INTERNATIONAL COOPERATION (TAX INFORMATION EXCHANGE AGREEMENTS) ACT 2005 2005 : 47
QUO FA T A F U E R N T BERMUDA INTERNATIONAL COOPERATION (TAX INFORMATION EXCHANGE 2005 : 47 TABLE OF CONTENTS 1 2 3 4 4A 5 5A 6 6A 7 8 8A 9 10 11 12 Short title Interpretation Duties of the Minister Grounds
More informationPLEASE NOTE. For more information concerning the history of this Act, please see the Table of Public Acts.
PLEASE NOTE This document, prepared by the Legislative Counsel Office, is an office consolidation of this Act, current to May 30, 2012. It is intended for information and reference purposes only. This
More informationVICTIMS OF CRIME ACT
Province of Alberta VICTIMS OF CRIME ACT Revised Statutes of Alberta 2000 Current as of November 1, 2013 Office Consolidation Published by Alberta Queen s Printer Alberta Queen s Printer 7 th Floor, Park
More information7.08.2 Privacy Rules for Customer, Supplier and Business Partner Data. Directive 7.08 Protection of Personal Data
Akzo Nobel N.V. Executive Committee Rules 7.08.2 Privacy Rules for Customer, Supplier and Business Partner Data Source Directive Content Owner Directive 7.08 Protection of Personal Data AkzoNobel Legal
More informationThe Manitoba Child Care Association PRIVACY POLICY
The Manitoba Child Care Association PRIVACY POLICY BACKGROUND The Manitoba Child Care Association is committed to comply with the legal obligations imposed by the federal government's Personal Information
More informationCOMPUTER MISUSE AND CYBERSECURITY ACT (CHAPTER 50A)
COMPUTER MISUSE AND CYBERSECURITY ACT (CHAPTER 50A) (Original Enactment: Act 19 of 1993) REVISED EDITION 2007 (31st July 2007) An Act to make provision for securing computer material against unauthorised
More informationInsurance Journal. Defending Until the End When Does the Duty to. Volume 1, Issue 3 Editor Keoni Norgren. May 1, 2013
Insurance Journal May 1, 2013 In this Issue Volume 1, Issue 3 Editor Keoni Norgren Defending Until the End When Does the Duty to Defend End? Cyber Liability Laws in Canada Dolden Wallace Folick Welcomes
More informationSERVICE OF PAYMENT CARDS ON THE INTERNET (E-COMMERCE) ( date ) Bank. SWEDBANK AS Registry code: 10060701 Address/postal code: Liivalaia 8, 15040
SERVICE OF PAYMENT CARDS ON THE INTERNET (E-COMMERCE) Bank SWED AS Registry code: 10060701 Address/postal code: Liivalaia 8, 15040 Town/County: Phone: 6 132 222 Bank's representative: Service Provider
More informationThe Archives and Public Records Management Act
1 ARCHIVES AND PUBLIC RECORDS MANAGEMENT c. A-26.11 The Archives and Public Records Management Act being Chapter A-26.11* of The Statutes of Saskatchewan, 2015 (effective August 24, 2015). *NOTE: Pursuant
More informationResponsibilities of Custodians and Health Information Act Administration Checklist
Responsibilities of Custodians and Administration Checklist APPENDIX 3 Responsibilities of Custodians in Administering the Each custodian under the Act must establish internal processes and procedures
More informationNo Cloud Over the Patriot Act. March 2012 M-12544192-1 1
No Cloud Over the Patriot Act March 2012 M-12544192-1 1 1. Introduction 1.1. All governments, including Ireland, have become more alert to national security risks in the wake of the 9/11 attacks and the
More informationReport of the Information & Privacy Commissioner/Ontario. Review of the Canadian Institute for Health Information:
Information and Privacy Commissioner of Ontario Report of the Information & Privacy Commissioner/Ontario Review of the Canadian Institute for Health Information: A Prescribed Entity under the Personal
More informationIN THE SUPREME COURT OF BRITISH COLUMBIA NOTICE OF CIVIL CLAIM. This action has been started by the plaintiff for the relief set out in Part 2 below.
IN THE SUPREME COURT OF BRITISH COLUMBIA No. ----- Vancouver Registry BETWEEN: THE BRITISH COLUMBIA CIVIL LIBERTIES ASSOCIATION Plaintiff AND: THE ATTORNEY GENERAL OF CANADA Defendant Narne and address
More informationCROSS-BORDER INSOLVENCY PROTOCOL FOR 360NETWORKS INC. AND ITS AFFILIATED COMPANIES
CROSS-BORDER INSOLVENCY PROTOCOL FOR 360NETWORKS INC. AND ITS AFFILIATED COMPANIES 1. Certain defined terms used in this Protocol shall have the meanings assigned to them in Appendix A. 2. The 360 Group
More informationAccountable Privacy Management in BC s Public Sector
Accountable Privacy Management in BC s Public Sector Contents Accountable Privacy Management In BC s Public Sector 2 INTRODUCTION 3 What is accountability? 4 Steps to setting up the program 4 A. PRIVACY
More informationSUBMISSION OF THE BRITISH COLUMBIA CIVIL LIBERTIES ASSOCIATION TO THE INFORMATION AND PRIVACY COMMISSIONER FOR BRITISH COLUMBIA
. SUBMISSION OF THE BRITISH COLUMBIA CIVIL LIBERTIES ASSOCIATION TO THE INFORMATION AND PRIVACY COMMISSIONER FOR BRITISH COLUMBIA ON IMPLICATIONS OF THE USA PATRIOT ACT ON GOVERNMENT OUTSOURCING August
More informationBig Data, Big Risk? Data Management and Privacy. Presented by: Timothy Banks, Heather Innes, and Colonel Vihar Joshi
Big Data, Big Risk? Data Management and Privacy Presented by: Timothy Banks, Heather Innes, and Colonel Vihar Joshi Data Management & Privacy Compliance Heather Innes Chief Privacy Officer, General Motors
More informationDoing Business in Canada. SCG Legal Annual Meeting Vancouver, British Columbia September 2015
Doing Business in Canada SCG Legal Annual Meeting Vancouver, British Columbia September 2015 Introduction World s second largest country by area As of July 1, 2014 the population was estimated at 35,540,400
More informationThe Freedom of Information and Protection of Privacy Act
FREEDOM OF INFORMATION AND 1 The Freedom of Information and Protection of Privacy Act being Chapter of the Statutes of Saskatchewan, 1990-91, as amended by the Statutes of Saskatchewan, 1992, c.62; 1994,
More informationSTATUTORY INSTRUMENTS. S.I. No. 336 of 2011
STATUTORY INSTRUMENTS. S.I. No. 336 of 2011 EUROPEAN COMMUNITIES (ELECTRONIC COMMUNICATIONS NETWORKS AND SERVICES) (PRIVACY AND ELECTRONIC COMMUNICATIONS) REGULATIONS 2011 (Prn. A11/1165) 2 [336] S.I.
More informationManaging Contracts under the FOIP Act. A Guide for Government of Alberta Contract Managers and FOIP Coordinators
Managing Contracts under the FOIP Act A Guide for Government of Alberta Contract Managers and FOIP Coordinators ISBN 978-0-7785-6102-6 Produced by Access and Privacy Service Alberta 3rd Floor, 10155 102
More informationProtecting your privacy
Protecting your privacy Table of Contents Answering your questions about privacy Your privacy... 1 Your consent... 1 Answering your questions about privacy... 2 About cookies... 9 Behavioural Advertising/Online
More informationCanada s New Anti-Spam Legislation: Overview and Implications for Businesses
dentons.com Focus on Communications Canada s New Anti-Spam Legislation: Overview and Implications for Businesses January, 2011 Contact Margot Patterson Dentons Canada LLP Counsel, Ottawa margot.patterson@dentons.com
More informationNATIONAL PAYMENT SYSTEM ACT
LAWS OF KENYA NATIONAL PAYMENT SYSTEM ACT No. 39 of 2011 Revised Edition 2012 [2011] Published by the National Council for Law Reporting with the Authority of the Attorney-General www.kenyalaw.org [Rev.
More informationPrivacy and the USA Patriot Act
Privacy and the USA Patriot Act Implications for British Columbia Public Sector Outsourcing October 2004 Information & Privacy Commissioner for British Columbia Library and Archives Canada Cataloguing
More informationAnnex 1. Contract Checklist for Cloud-Based Genomic Research Version 1.0, 21 July 2015
Annex 1. Contract Checklist for Cloud-Based Genomic Research Version 1.0, 21 July 2015 The following comprises a checklist of areas that genomic research organizations or consortia (collectively referred
More informationFive Myths Regarding Privacy and Law Enforcement Access to Personal Information in the European Union and the United States
Five Myths Regarding Privacy and Law Enforcement Access to Personal Information in the European Union and the United States Cloud computing is one of the Internet s great innovations, enabling individuals
More informationThe United States Federal Trade Commission ("FTC") and the Office of the Data Protection Commissioner of Ireland (collectively, "the Participants"),
MEMORANDUM OF UNDERSTANDING BETWEEN THE UNITED STATES FEDERAL TRADE COMMISSION AND THE OFFICE OF THE DATA PROTECTION COMMISSIONER OF IRELAND ON MUTUAL ASSISTANCE IN THE ENFORCEMENT OF LAWS PROTECTING PERSONAL
More informationVideo Surveillance. Purpose. Policy
Video Surveillance MC Approval: December 2001 Policy Responsibility: Director, Corp. Comm. & PA Contact name: FOI Coordinator Purpose To ensure that all applications of video surveillance in BCBC-administered
More informationINVESTORS RIGHTS. a Schedule III bank, meaning an authorized foreign bank named in Schedule III of the Bank Act (Canada);
INVESTORS RIGHTS In certain circumstances, investors resident in certain provinces of Canada are provided with a remedy for rescission or damages, or both, in addition to any other right they may have
More informationEMERGENCY MANAGEMENT ACT
Province of Alberta Revised Statutes of Alberta 2000 Current as of December 11, 2013 Office Consolidation Published by Alberta Queen s Printer Alberta Queen s Printer 7 th Floor, Park Plaza 10611-98 Avenue
More informationLSSA Guidelines on the Use of Internet-Based Technologies in Legal Practice
LSSA Guidelines on the Use of Internet-Based Technologies in Legal Practice LSSA 2014 1 Use of Internet-Based Technologies in Legal Practice LSSA Guidelines Version 1.0 November 2014 2 Foreword Please
More informationTable of Contents. Acknowledgement
OPA Communications and Member Services Committee February 2015 Table of Contents Preamble... 3 General Information... 3 Risks of Using Email... 4 Use of Smartphones and Other Mobile Devices... 5 Guidelines...
More informationWEST VIRGINIA LEGISLATURE. House Bill 4402
06R WEST VIRGINIA LEGISLATURE 06 REGULAR SESSION Introduced House Bill 0 BY DELEGATES SKINNER AND FAIRCLOTH [Introduced February, 06; referred to the committee on the Judiciary.] 06R A BILL to amend the
More informationThe Canadian Public Accountability Board ( CPAB ), based on its obligations and authority under Canadian federal and applicable provincial laws; and
MEMORANDUM OF UNDERSTANDING BETWEEN THE CANADIAN PUBLIC ACCOUNTABILITY BOARD AND THE NETHERLANDS A UTHORJTY FOR THE FINANCIAL MARKETS ON COOPERATION AND THE EXCHANGE OF INFORMATION RELATED TO THE OVERSIGHT
More informationPassenger Protect Program Transport Canada
AUDIT REPORT OF THE PRIVACY COMMISSIONER OF CANADA Passenger Protect Program Transport Canada Section 37 of the Privacy Act 2009 AUDIT OF PASSENGER PROTECT PROGRAM, TRANSPORT CANADA The audit work reported
More informationService Line Warranties of Canada PRIVACY STATEMENT
Service Line Warranties of Canada PRIVACY STATEMENT We at Service Line Warranties of Canada ( us, our we, or Company ) consider the protection of your personal information to be a priority when you visit
More informationStudent Email Service Improvements Executive Background Brief
Student Email Service Improvements Executive Background Brief Executive Summary Despite the ubiquity of consumer email services and the fact that virtually all students coming to York have been using electronic
More informationWe will not collect, use or disclose your personal information without your consent, except where required or permitted by law.
HSBC Privacy Notice HSBC's Privacy Principles HSBC Bank Canada is a subsidiary of HSBC Holdings plc which, together with its subsidiaries and affiliates, is one of the world s largest banking and financial
More informationM E M O R A N D U M. The Policy provides for blackout periods during which you are prohibited from buying or selling Company securities.
M E M O R A N D U M TO: FROM: All Directors, Officers and Covered Persons of Power Solutions International, Inc. and its Subsidiaries Catherine Andrews General Counsel and Insider Trading Compliance Officer
More informationImplications for Cloud Computing & Data Privacy
Implications for Cloud Computing & Data Privacy Diane Mueller Cloud Evangelist, ActiveState dianem@activestate.com http://www.activestate.com/stackato Founded 1997 2 million developers, 97% of Fortune
More information(Informal Translation) Chapter One. General Provisions. 1- The deposit of securities with the Company or with any licensed entity;
CAPITAL MARKET AUTHORITY (Informal Translation) Central Securities Depository and Registry Law No. 93 of 2000 Chapter One General Provisions Article 1 In this Law, the Company means a company licensed
More informationOffice of the Information and Privacy Commissioner Province of British Columbia Order No. 16-1994 July 8, 1994
Office of the Information and Privacy Commissioner Province of British Columbia Order No. 16-1994 July 8, 1994 INQUIRY RE: A Request for Access to Records of the Insurance Corporation of British Columbia
More informationInformation Sheet: Cloud Computing
info sheet 03.11 Information Sheet: Cloud Computing Info Sheet 03.11 May 2011 This Information Sheet gives a brief overview of how the Information Privacy Act 2000 (Vic) applies to cloud computing technologies.
More information3. Consent for the Collection, Use or Disclosure of Personal Information
PRIVACY POLICY FOR RENNIE MARKETING SYSTEMS Our privacy policy includes provisions of the Personal Information Protection Act (BC) and the Personal Information Protection and Electronic Documents Act (Canada),
More informationThe Youth Drug Detoxification and Stabilization Act
YOUTH DRUG DETOXIFICATION 1 The Youth Drug Detoxification and Stabilization Act being Chapter Y-1.1* of The Statutes of Saskatchewan, 2005 (effective April 1, 2006) as amended by The Statutes of Saskatchewan,
More informationSCHEDULE "C" to the MEMORANDUM OF UNDERSTANDING BETWEEN ALBERTA HEALTH SERVICES AND THE ALBERTA MEDICAL ASSOCIATION (CMA ALBERTA DIVISION)
SCHEDULE "C" to the MEMORANDUM OF UNDERSTANDING BETWEEN ALBERTA HEALTH SERVICES AND THE ALBERTA MEDICAL ASSOCIATION (CMA ALBERTA DIVISION) ELECTRONIC MEDICAL RECORD INFORMATION EXCHANGE PROTOCOL (AHS AND
More informationTHE REGULATION OF INTERCEPTION OF COMMUNICATIONS BILL, 2007 ARRANGEMENT OF CLAUSES. PART I - PRELIMINARY
THE REGULATION OF INTERCEPTION OF COMMUNICATIONS BILL, 2007 ARRANGEMENT OF CLAUSES. PART I - PRELIMINARY Clause. 1. Interpretation. PART II - CONTROL OF INTERCEPTION AND ESTABLISHMENT OF A MONITORING CENTRE
More informationSENATE... No. 2299. The Commonwealth of Massachusetts. In the Year Two Thousand Fourteen
SENATE.............. No. 2299 The Commonwealth of Massachusetts In the Year Two Thousand Fourteen SENATE, Wednesday, July 23, 2014 The committee on Ways and Means, to whom was referred the Senate Bill
More informationEnterprise Terrorist Financing & Money Laundering Policy
Policy Sponsor: Summary: CA and Compliance Sets out obligations under and suggestions for procedures to comply with antiterrorist financing, anti-money laundering and other laws implementing sanctions
More informationINFORMATION ON CUSTOMER COMPANY
INFORMATION ON CUSTOMER COMPANY 1 st Floor, The Exchange, 18 Cybercity, Ebene, Mauritius Telephone: - (230) 454 3200 Facsimile: + (230) 454 3202 Date Customer type GBL1 GBL2 Trust Kindly read attached
More information(Unofficial translation by the Financial and Capital Market Commission)
(Unofficial translation by the Financial and Capital Market Commission) Text consolidated with amending laws of 12 December 2008; 01 December 2009; 10 December 2009. If a whole or part of a section has
More informationThe Emergency Protection for Victims of Child Sexual Abuse and Exploitation Act
EMERGENCY PROTECTION FOR VICTIMS 1 The Emergency Protection for Victims of Child Sexual Abuse and Exploitation Act being Chapter E-8.2 of the Statutes of Saskatchewan, 2002 (effective October 1, 2002)
More informationAssociate Agent Agreement
Associate Agent Agreement Between: THE EMPIRE LIFE INSURANCE COMPANY (referred to as Empire Life ) AND (referred to as Associate Agent ) Street Address: City or Town: Province: Postal Code: Effective Date:
More informationPHIA GENERAL INFORMATION
To: From: Researchers Legal Services and Research Services Date: May 21, 2013 Subject: Research and the New Personal Health Information Act On June 1, 2013, the Personal Health Information Act ( PHIA )
More informationNumber 19 of 2013. Criminal Justice Act 2013
Number 19 of 2013 Criminal Justice Act 2013 Number 19 of 2013 CRIMINAL JUSTICE ACT 2013 CONTENTS PART 1 PRELIMINARY AND GENERAL SECTION 1. Short title, collective citation and commencement PART 2 AMENDMENT
More information