Privacy legislation
PIPEDA
Canada’s federal private-sector privacy law. Identify applicable privacy requirements and the information-handling practices that support them.
Privacy and governance
Make obligations
part of the plan.
Connect relevant requirements to practical controls, clear ownership and evidence you can review.
Professional obligations
Law Society of Ontario
Consider professional confidentiality duties when reviewing file access, collaboration tools and technology practices.
Professional obligations
CPA Ontario
Consider the CPA Code of Professional Conduct, including confidentiality, in decisions about client information and technology.
Voluntary risk framework
NIST AI RMF
Use a structured approach to identify and manage risks associated with AI applications and their use.
Management system standard
ISO/IEC 42001
A reference for establishing and improving an AI management system, with defined governance responsibilities and processes.
Assurance readiness
SOC 2 readiness
Identify control and evidence gaps in preparation for an independent SOC 2 examination.
Applicability and engagement scope are assessed individually. These references do not imply certification, regulator endorsement or an assurance opinion.
Responsible AI in practiceChoose suitable usesProtect sensitive informationKeep people accountable
Your next step
Start with a clearer view
of your IT and security.
Discuss your priorities, ask questions and agree on the right next step.