Privacy Compliance in 2026: Advising Your Small Businesses Clients

The CBA is a professional organization that provides educational and networking opportunities for lawyers. Representing more than 36,000 lawyers, judges, notaries, law teachers, and law students from across Canada, the CBA is committed to enhancing the professional and commercial interests of a diverse membership and to protecting the independence of the judiciary and the Bar.

Wole's expertise spans an impressive range of technology and privacy law spheres. He provides invaluable guidance to clients on matters such as artificial intelligence, privacy compliance, robust data security measures, software integration, outsourcing strategies, cloud computing, and IP ownership. Wole's clients also rely on him to navigate the complexities of Software-as-a-Service (SaaS) agreements, Platform-as-a-Service (PaaS) agreements, Infrastructure-as-a-Service (IaaS) agreements, and licensing agreements with ease. Prior to joining WeirFoulds, Wole was a Partner at a boutique law firm that was heavily focused on Intellectual Property Law and Technology Law. At this firm, Wole served as a Co-Chair of the Technology Law Practice Group. Wole also has extensive in-house experience, as he has held roles as legal counsel at a Big Four professional services firm and two Fortune 500 companies. Beyond his legal practice, Wole frequently speaks on technology, artificial intelligence, and privacy law matters. Recently, Wole was a co-speaker at Osgoode Professional Development's National Forum on Artificial Intelligence, Ethics and the Law for Financial Services, where he spoke about the risks and mitigation strategies related to open source generative artificial intelligence. Wole is also the Director for the non-profit CLEO (Community Legal Education Ontario / Éducation juridique communautaire Ontario), a Certified Information Privacy Professional (CIPP/C) and is also a contributor for OneTrust's Data Guidance legal research platform.

Ms. Guimond-Valcourt advises organizations on technology risk management, data governance, and regulatory compliance, including privacy protection and the negotiation of technology agreements. She also leverages her extensive experience to support the implementation of integrated security and governance strategies, as well as cybersecurity incident preparedness and response. As a Breach Coach, she coordinates legal and regulatory responses to data breaches and cyberattacks, guiding executive teams in strategic decision-making around resilience and compliance. Before joining LCM, Ms. Guimond-Valcourt held key positions in cybersecurity, governance, and risk management at major institutions such as Desjardins and the Caisse de dépôt et placement du Québec (La Caisse). At Desjardins, she contributed to strengthening corporate frameworks for resilience, compliance, and incident management, while at La Caisse, she supported portfolio companies in enhancing their cybersecurity and risk governance practices. A member of the Quebec Bar since 2009, Ms. Guimond-Valcourt holds academic credentials in law, management, and cybersecurity. She serves as a lecturer at Polytechnique Montréal, where she teaches in the Master's program in Computer and Software Engineering, focusing on laws, standards, and reference frameworks in data protection and cybersecurity, as well as organizational resilience, including incident response — courses she helped develop. She also teaches at Université de Sherbrooke, in the Graduate Diploma program (DESS) in Business Law and Enterprise Risk. As Chair of the Technology Integration Committee of the Barreau de Montréal, she leads initiatives aimed at promoting the responsible adoption of technology in legal practice and the administration of justice, thereby contributing to public protection and supporting lawyers as they adapt to the evolving digital landscape. She is also a frequent speaker at industry events, where she shares practical insights on technology law, cybersecurity, and information governance.

Ilana Daulan is a civil and commercial litigation lawyer at the Montreal litigation boutique LCM Avocats Inc. She possesses specialized expertise in privacy law and data protection regulations. Current Role: Associate Attorney at LCM Avocats Inc. She originally joined the firm in 2024 as an articling student from the École du Barreau du Québec. Following the successful completion of her articling period, she was officially sworn in and welcomed as a full litigation associate in March 2025. Credentials: She holds the prestigious CIPP/C (Certified Information Privacy Professional/Canada) designation issued by the International Association of Privacy Professionals (IAPP). This certification verifies her mastery of Canadian federal, provincial, and territorial privacy laws, making her highly skilled in navigating modern regulatory compliance and data protection frameworks. Dual-Trained Jurisdiction: She is uniquely dual-trained across the legal systems of both Canada and France. Corporate Experience: Before practicing at LCM Avocats, she gained critical corporate and technology-sector experience working with major multinational tech companies, including Salesforce and eBay.

Kris Klein, CIPP/C, CIPM, FIP and Westin Fellow, has more than two and a half decades of public and private sector experience in the federal regulatory arena in Canada, and is one of Canada's leading advisors on privacy, data and AI governance, information security and access to information. Prior to starting Canada's first boutique law firm that specialized in this industry, Kris litigated and counseled extensively on federal regulatory law with a pre-eminent national firm, and, subsequently, for Canada's Department of Justice. Before leaving public service, he advised the Privacy Commissioner of Canada. In that role, Kris counseled on legal, policy and strategic issues, including on the handling of high-profile and sensitive cases. He negotiated and settled complaints with private and public sector organizations facing scrutiny over privacy compliance issues. Kris also represented the Commissioner and her office publicly before Parliamentary committees, as a conference speaker, and before the media.

Rachel Schechter, CIPP/C, CIPM, FIP, practices in all areas of workplace law, with a strong emphasis on privacy, data governance, cybersecurity, access to information, artificial intelligence, and related grievances and disputes. Rachel is recognized in Best Lawyers in Canada for her work in Privacy and Data Security Law, is a Certified Information Privacy Professional (Canada), a Certified Information Privacy Manager, and is recognized as a Fellow of Information Privacy. Rachel practices in all areas of privacy and data governance. She advises public and private sector clients on compliance, policy development, access requests, cyber incident preparedness, and impact assessments, including as related to novel products and technologies, such as AI, biometrics, and surveillance. Rachel acts in inquiries before the OIPC, and in related judicial reviews. She acts as breach counsel for clients experiencing cybersecurity attacks, helping manage risk, forensic investigations, and notification and reporting. Rachel is a talented labour lawyer, assisting unionized employers as counsel in arbitration and board work, collective bargaining, and strategic planning. She draws on varied dispute resolution experience, having appeared before all levels of court in British Columbia, the Federal Court, and federal and provincial labour boards. Rachel is Chair of the CBABC Women Lawyers Forum, and Past Chair of the Freedom of Information and Privacy Section Executive. She co-authored the book Personal Information Protection Act, British Columbia and Alberta: Quick Reference, published by Thomson Reuters in 2026. Outside of law, Rachel is a wine and concert enthusiast, and can be found hosting dinners, antiquing, or spending time with her husband and dogs.

Erin Hardy is the General Counsel, Corporate Secretary, and Chief Privacy Officer for Service New Brunswick, a Crown corporation based in Fredericton, New Brunswick, Canada. In this role, she oversees regulatory compliance, access to information, corporate governance, and privacy practices for the organization. Erin brings over 17 years of legal experience spanning both private practice and the public sector across New Brunswick and Nova Scotia. Before joining the civil service, she spent a decade as a corporate commercial lawyer at a large regional law firm, building a strong foundation in corporate and commercial law. She has served with Service New Brunswick since September 2016, having previously held the position of Associate General Counsel before assuming her current role as Chief Privacy Officer. She holds a Bachelor of Science (B.Sc.) and a Bachelor of Laws (LL.B.), along with a Certificate in Information Access and Protection of Privacy (CIAPP), reflecting her specialized expertise in privacy and information law. Beyond her role at Service New Brunswick, Erin is active in the broader legal and privacy community. She serves as Section Chair for Privacy Law with the Canadian Bar Association in New Brunswick (CBANB) and is a Director on the board of the Digital ID & Authentication Council of Canada (DIACC), contributing to national conversations on digital identity and authentication standards.