AggregateIQ Data Services case: extraterritoriality of the Canadian privacy rules
The Office of the Privacy Commissioner of Canada has just issued a report finding that AggregateIQ, a Canadian company that worked on the political campaing for Brexit, has violated the Canadian privacy rules even if it was operating on the UK campaingn. The report states that "activities of tech companies operating across borders [must] respect privacy obligations in all jurisdictions in which they operate. This is especially so in the case of handling sensitive information such as that which could reveal political opinions and personal beliefs. [...] Our report underscores that an organization must ensure that it understands, and complies with, its legal responsibilities in Canada, even when it is also operating in other jurisdictions. This is what the public expects. It is what we, as regulators, expect".
Page 1 of 1