TOPIC

In June, the federal government made its third attempt in six years to replace PIPEDA by introducing Bill C-36, the Protecting Privacy and Consumer Data Act. The bill comes from a majority government and is widely expected to pass. It works together with Bill C-34, which would create the new Digital Safety Commission.

C-36 would give that commission jurisdiction over privacy, add a private right of action, and introduce new rules for consent, retention and deletion, and automated decision-making.

Our panel will look at what the bills change in practice and whether their design works. Technology and privacy lawyers who will have to put the new regime into practice won’t want to miss this discussion of:

• De-identification and anonymization: the new standards and what they mean for day-to-day operations;
• AI secondary uses and vendor agreements: training on personal information, legitimate interests and other exceptions, updating contract terms, and putting the new obligations into practice;
• Retention, deletion, and portability: data mobility and data already embedded in trained models;
• A new regulator: what changes when the Digital Safety and Data Protection Commission takes over;
• Privacy governance models: frameworks vs. prescriptive rules, and whether consent is still the right governance model.

Lunch will be served at noon and the presentation will begin at 12:30pm.

ABOUT THE SPEAKERS

Dina Maxwell – Dina Maxwell is a global privacy, data protection, and AI governance executive with extensive experience leading privacy and regulatory compliance programs in highly regulated environments. As AVP, Compliance – Global Privacy Officer at TD Bank Group, she oversees enterprise privacy programs and advises on the responsible use of data and AI, helping to build governance frameworks that foster trust, accountability, and operational resilience.

Her work sits at the intersection of compliance, law, technology, and business strategy, enabling innovation while navigating evolving regulatory expectations. Dina brings a pragmatic, risk-based approach to privacy, data governance, and AI oversight, informed by experience across financial services, professional services, and other complex global organizations.

In addition to her industry leadership, Dina serves as an Adjunct Professor of Privacy Law at the Lincoln Alexander School of Law at Toronto Metropolitan University and regularly guest lectures and speaks on privacy, AI governance, and data protection issues. She is a Fellow of Information Privacy (FIP) and holds the Artificial Intelligence Governance Professional (AIGP), Certified Information Privacy Manager (CIPM), Certified Information Privacy Professional/Canada (CIPP/C), and Certified Information Privacy Professional/United States (CIPP/US) designations.

Ellie Marshall – Ellie’s practice focuses on privacy, access to information, cybersecurity, AI governance, accessibility, online safety, and related consumer protection issues.

As a Certified Information Privacy Professional (CIPP/C), Ellie advises public and private sector clients on a broad range of strategic and practical data governance matters, including cross-border data transfers, drafting privacy policies and consent frameworks, conducting privacy impact assessments, responding to data subject requests, and negotiating data protection agreements. She leads clients through incident response, including representing clients in regulatory investigations arising from cybersecurity attacks. Ellie also assists organizations in standing up AI governance frameworks, including AI use policies and vendor management programs, and advises on transparency requirements for automated decision-making systems.

Ellie’s practice is grounded in a deep academic and professional engagement with the intersection of law, technology and society. She holds a master of science (with distinction) from the Oxford Internet Institute, University of Oxford, where her research examined the impact of government surveillance on people with disabilities. Her scholarly work has been published in peer-reviewed academic journals, including the Canadian Journal of Law and Technology. Before joining Blakes, she trained at the Ontario Ministry of the Attorney General — experience that sharpens her practical advice and ability to anticipate how regulators think and respond.

COST FOR ATTENDANCE

Cost for attendance: fifteen dollars ($15) for members and students, twenty dollars ($20) for non-members, payable at the meeting. Receipts will be available. Cheques should be made payable to the Toronto Computer Lawyers’ Group.

REGISTRATION

Please register before noon on Thursday, November 12, 2026. Registrations may not be confirmed. Substitutions are permitted anytime. Registrants who do not attend and do not cancel or send a substitute may be invoiced for lunch.

Please e-mail registrations or cancellations to: secretary@tclg.org.

When registering, please advise if you have any dietary restrictions.

SPREAD THE WORD

Please circulate this notice to business associates, clients, colleagues or others who may be interested in attending a meeting or joining the TCLG.