In renewing his call for a new national data protection framework, Canada’s federal privacy commissioner Daniel Therrien has warned against including an overly broad standard business practices provision – a concept similar to the GDPR’s legitimate interest basis for non-consent-based data processing.
