.svg)
CanadaPrivacy
PHIPA for Health-Tech Vendors: What Ontario Hospitals Ask
PHIPA, Ontario's Personal Health Information Protection Act, 2004, is the provincial law that governs how health information custodians, such as...
RPAA Compliance: Bank of Canada Framework Guide for PSPs
RPAA compliance means a payment service provider (PSP) in scope of the Retail Payment Activities Act registers with the Bank of Canada, operates a...
OSFI B-10 for Vendors: What a Bank's Vendor Review Asks
OSFI Guideline B-10 (Third-Party Risk Management) sets the rules Canadian banks, insurers, and trust and loan companies follow when they assess,...
OSFI B-13 for Suppliers: SOC 2 and ISO 27001 Mapping
OSFI B-13 is the Office of the Superintendent of Financial Institutions' Technology and Cyber Risk Management guideline. B-13 has been in effect...
Top vCISO Services in Canada (2026): A Buyer's Guide
A vCISO service in Canada is fractional security leadership that owns the security program and also covers the Canadian obligations a US-focused...
HIPAA in Canada: When It Applies and What PHIPA Adds
HIPAA is a US law that reaches a Canadian company the moment that company creates, receives, maintains, or transmits protected health information...
PIPEDA Compliance for SaaS: 10 Principles as Controls
PIPEDA (the Personal Information Protection and Electronic Documents Act) is Canada's federal privacy law for private-sector organizations that...
ISO 27001 Certification in Canada: Bodies, Costs, 2026 Timeline
ISO 27001 certification in Canada is issued by an accredited certification body, a separate firm from the consultant who helps build the program. A...