Privacy and the Receipt of Personal Information From EU Countries
The EU privacy directive (1995 version – I gather that it is being revised, though I don’t know on what timetable) provides that member countries may not release personal information outside the EU unless the recipients are bound by equivalent safeguards for privacy.
While the US has a ‘safe harbor’ agreement with the EU about criteria for judging when the protections are equivalent, Canada does not. On the other hand, we have a generally applicable privacy law (PIPEDA) and some provincial equivalents, plus personal health information laws in most provinces. Are they enough to permit the personal information to come . . . [more]
