Resources

Data Protection & Cybersecurity Insights

Articles and legal commentary on Data Protection & Cybersecurity from Sarhan Data Law.

Latest thinking

Articles and Insights

Browse legal analysis on privacy, AI governance, technology transactions, and product counsel.

Product Counsel • January 19, 2026

Party Roles in Data Processing Agreements: When Controller-to-Controller Makes Sense

Many important data flows operate on a controller-to-controller basis. Mischaracterizing these relationships creates legal risk and operational confusion.

Data Protection & Cybersecurity • April 8, 2025

Decoding Your Cyber Policy: 6 Critical Things to Review

Don't just buy cyber insurance, understand it! Review 6 critical areas: data exclusions, security minimums, coverage definitions/limits, incident response rules, timelines (retroactive date, BI), and modern threat coverage. Ensure it aligns with your risk. Read more...

Product Counsel • March 31, 2025

PIPEDA: A Resilient Framework for Privacy in the AI Era

Canada's PIPEDA governs private sector data use with 10 principles (Accountability, Consent, etc.). Learn how this resilient law, with provincial variations & GDPR adequacy, adapts to tech like AI. Crucial for compliance. Read more...

Product Counsel • March 24, 2025

New Frontiers in Canadian Privacy Law

Landmark 2024 Clearview & Facebook rulings reshape Canadian privacy law. BC law gains extraterritorial reach; Fed courts demand clearer consent & hold firms liable for third-party data use. Critical updates for AI & data compliance. Read more...