Excerpt:

Canadian firms violating the General Data Protection Regulation (GDPR) enforced in the European Union can face fines up to 20 million euros for violations, effectively becoming the “toughest” privacy regulations in the world.

A new law known as GDPR implemented in the European Union on May 25 means Canadian businesses that offer products or services to EU individuals online, or are that monitor the behaviours of people in the EU, are overhauling their business practices to strengthen data security and privacy rules.