Privacy laws, security frameworks and financial-reporting standards: what each one is, who it applies to, who enforces it, what changes are coming, and how our divisions help you meet it.
Québec Law 25
Quebec’s private-sector privacy law, fully in force since 2024-09-22.
Read the guideCanadaPIPEDA
Canada’s federal privacy law for commercial activity across borders.
Read the guideCanada · proposedBill C-36
Proposed replacement for PIPEDA, tabled 2026-06-15. Not yet law.
Read the guideEuropean UnionGDPR
Applies when you serve or monitor people in the EU.
Read the guidePCI DSS
Card data security, required if you accept payment cards. Current version 4.0.1.
Read the guideInternationalISO 27001
The certifiable standard for an information security management system.
Read the guideService providersSOC 2
A CPA firm’s attestation on a service provider’s controls.
Read the guideDebit networkInterac
Participation and security requirements for Interac Debit and e-Transfer.
Read the guideIFRS
Required for publicly accountable enterprises. IFRS 18 applies from 2027.
Read the guideCanadaASPE and ASNPO
Standards for private enterprises and not-for-profit organizations.
Read the guidePublic sectorPSAS
Standards for governments; new reporting model from 2026-04-01.
Read the guideEngagementsCAS and CSRS 4200
Auditing standards and compilation engagements.
Read the guide