Category: Cybersecurity

Cybersecurity Alert: IIROC-Regulated Investment Firms Must Now Report Incidents

November 25, 2019

The Investment Industry Regulatory Organization of Canada (IIROC) has amended its Dealer Member Rules to require mandatory reporting by dealer members (Dealers) in the event of a cybersecurity incident. The amendments are accompanied by guidance on the new requirements. IIROC expects dealers to issue an initial report within three days of discovery of an incident, and to submit a detailed…

One Year into Mandatory Reporting, Canada’s Privacy Commissioner Releases Key Data Breach Trends

November 7, 2019

To mark the one-year anniversary of mandatory breach reporting under the Personal Information Protection and Electronic Documents Act (PIPEDA), the Office of the Privacy Commissioner of Canada (OPC) published a blog post providing observations, statistics and compliance tips. Since November 2018, organizations that are subject to PIPEDA are required to notify the OPC and affected individuals of a “breach of…

Litigation Risk on the Rise: 3 Trends in Cybersecurity Class Actions in Canada

October 30, 2019

Cybersecurity litigation in Canada is on the rise. Given that the number of data breaches in Canada has been rising exponentially in recent years, the increase in cybersecurity litigation is unsurprising. However, the increase in the volume of breaches, coupled with privacy legislation changes, has resulted in more reporting to the privacy commissioners, attempted class proceedings, and settlements of actions….

Cybersecurity Concerns in the Age of Autonomous and Connected Vehicles

October 22, 2019

In this video, Blakes Cybersecurity and Litigation lawyer Nicole Henderson discusses the biggest cybersecurity challenges facing manufacturers of autonomous vehicles, cybersecurity mechanisms that automobile companies can adopt in order to prepare and protect themselves from cyber threats, and cybersecurity class actions.  For further information, please contact: Nicole Henderson                      416-863-2399 or any other member of our Automotive, Cybersecurity and Privacy groups.

When Cyber Threatens Your Deal: 5 Cybersecurity Tips That Could Save Your M&A Transaction

October 21, 2019

In today’s technology-driven business world, organizations are more vulnerable than ever to cybersecurity threats such as data and privacy breaches. As a result, in the context of M&A transactions, assessing the cybersecurity posture of a target entity has become a key due diligence consideration for buyers. Depending on the target’s operations and the industry in which it operates, the level…

Cybersecurity Month: Learn How to Safeguard Your Business from Cyber Threats

October 15, 2019

In an increasingly digitized world, data has become one of the most valuable assets of an organization, and data breaches have become more common and sophisticated. It is often not a matter of “if” but “when” a data breach will occur. A cyberattack can have a devastating financial and reputational effect on your business, costing millions of dollars. As part of…

Leading the Defence: 5 Practical Strategies to Respond to a Cybersecurity Incident

October 15, 2019

Cybersecurity incidents are becoming increasingly prevalent and sophisticated in nature, often resulting in, among other things, a loss or compromise of sensitive confidential or person information, material business interruption and significant remediation costs, reputational damage, and litigation exposure. In order to successfully respond to, and contain a, cybersecurity incident, businesses must act quickly and methodically, especially during the critical first…

Cyber Health Check: How Prepared Is Your Business?

October 9, 2019

As cyberattacks become both more prevalent and complex, it’s often no longer a matter of “if”, but “when” a breach will occur. However, organizations can take steps to reduce the risk of a breach and to mitigate the impact of a breach should one occur. We outline below five things businesses and business leaders should do to protect against, and…

Infrastructure Update: New NERC Directive Emphasizes Cyber Planning and Reporting for Electrical Energy Sector

August 26, 2019

The North American Electric Reliability Corp. (NERC) recently adopted the Cyber Security – Incident Reporting and Response Planning CIP-008-6 directive (Directive), which creates new cybersecurity incident reporting obligations for bulk electric systems (BES) categorized as high or medium impact in North America. The Directive also emphasizes the importance of cyber planning and preparedness and is set to be implemented in…

All About Data: Best Practices for Assessing Cyber Risks, Negotiating Contracts and Responding to Breaches

May 28, 2019

Please join our Cybersecurity, Privacy and Technology lawyers for an in-depth discussion about data as one of the most valuable assets of an organization. In this session, we will explore the current regulatory framework and how you can best protect your organization from ever-increasing cybersecurity threats, as well as what you should do in the event of a breach. Topics:…