We counsel a wide range of companies on data privacy and security terms in commercial contracts, with a focus on the evolving Canadian, European, and Californian landscapes. Our clients include cloud computing companies hosting third-party data from around the globe. This is a dynamic and rapidly changing area, given the increasing (and often inconsistent) array of potentially applicable laws such as Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario's Personal Health Information Protection Act (PHIPA) for health information, and Ontario's Freedom of Information and Protection of Privacy Act (FIPPA) and Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) for public sector organizations, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), and the European Economic Area’s General Data Protection Regulation (GDPR). We ensure compliance with these complex, interwoven regulatory frameworks.