Notes from the IAPP Canada: OPC draft guidance moves vendor privacy due diligence upstream
Canada's Office of the Privacy Commissioner has released draft guidance that would require organizations to conduct privacy due diligence on vendors earlier in the procurement process, before contracts are signed rather than after. The move signals a shift toward treating third-party privacy risk as a front-end obligation, not an afterthought.
Who should care: Lawyers · Compliance · General readers · Privacy officers · Policy