The European Union's General Data Protection Regulation: what it means for Canadian firms

Archived and Outdated Information: This publication is out of date and should be referenced for research or recordkeeping purposes only. It is not subject to the Government of Canada Web Standards and has not been altered or updated since it was archived. You can request an alternate version of our publications by email at Accessibilite-accessibility@international.gc.ca or telephone at 1-800-267-8376. This document explains the European Union’s General Data Protection Regulation (GDPR) and what it means for Canadian businesses handling the personal data of EU residents. It outlines key obligations, new individual rights, compliance considerations, and the implications of the EU’s data‑adequacy decision for Canada.

Publisher

Global Affairs Canada

Resources

2

Catalogue metadata updated

2026-03-16