GDPR Basics for Canadian Businesses Serving EU Customers

GDPR can apply to a Canadian business even without a physical EU presence, if you're offering goods or services to, or monitoring, people in the EU.

Key Additional Obligations

GDPR requires more explicit, granular consent than PIPEDA generally does, a documented legal basis for each type of data processing, and stricter breach notification timelines.

The Right to Erasure

EU individuals have a stronger "right to be forgotten" under GDPR than PIPEDA typically provides, requiring a genuine process for permanently deleting personal data on request.

Further Reading

• Contact Our Team
• SSL Certificates
• Office of the Privacy Commissioner of Canada