Ontario's Bill 97 became law on April 24, 2026, and public sector institutions are already operating under a changed framework. New timelines, staged access rules, mandatory privacy impact assessments, and expanded breach reporting obligations are now in play across both FIPPA and MFIPPA. If your policies and procedures haven't been updated yet, the clock is running.

The PowerSchool breach exposed sensitive personal data of millions in Canada, highlighting the urgent need for strong vendor management and privacy accountability. School boards must ensure contracts, oversight, and incident response plans meet Canadian privacy laws to protect student information and maintain trust.

Discover what the Office of the Privacy Commissioner of Canada’s 2025 decision on TikTok means for Canadian businesses using personalization, AI, and data analytics. This article breaks down how TikTok’s practices violated PIPEDA, the new compliance expectations for consent and transparency, and actionable steps for building privacy-first personalization strategies. Learn why protecting children’s data, conducting Privacy Impact Assessments, and offering clear, granular consent are now essential for Canadian organizations aiming to stay compliant and earn consumer trust.