As digital technologies continue to reshape how Canadians live, work, and communicate, the protection of personal information has become more urgent than ever. To ensure privacy standards remain effective and aligned with today’s realities, the Digital Governance Standards Institute (DGSI) is launching a 90-day maintenance review of CAN/DGSI 109-2:2024 – Privacy Part 2: Canadian Information Privacy Protection Framework.
This National Standard of Canada, published in April 2024, outlines minimum requirements for organizations that access, collect, use, retain, and disclose personal information. It serves as a practical, technology neutral framework for organizations across all sectors including private businesses, governments, and nonprofits seeking to harmonize compliance with Canada’s diverse and evolving privacy laws.
The standard recognizes the growing complexity of the data landscape and the increasing demands on organizations to demonstrate responsible data stewardship. Whether managing sensitive customer data, employee information, or health records, organizations must navigate a patchwork of federal, provincial, and international rules. CAN/DGSI 109-2 helps simplify this challenge by offering a clear, scalable framework grounded in accountability and best practices.
Key elements of the standard include:
- Designation of privacy officials and establishment of internal accountability structures
- Clear processes for consent, access, correction, and deletion of personal information
- Requirements for maintaining inventories of personal data and justifications for its use
- Implementation of proportionate security safeguards based on data sensitivity
- Clear responsibilities for managing and reporting data breaches involving personal information
The standard also supports interoperability with global privacy regimes, making it especially valuable for organizations operating internationally or handling cross-border data flows.
With digital innovation accelerating and public expectations for transparency and control continuing to rise, standards like CAN/DGSI 109-2 are essential tools in fostering trust, protecting rights, and enabling innovation.
The maintenance review is open until August 12 2025. DGSI invites privacy professionals, industry leaders, legal experts, policymakers, and members of the public to review the standard and provide feedback. Comments will help ensure the standard continues to reflect the needs and realities of today’s data-driven world. Access the draft standard and submit your input HERE.
Get involved
The DGSI’s development process is collaborative and open to all, and anyone interested in contributing to the development of digital governance standards is encouraged to get involved. For more information on how to participate, contact:
Darryl Kingston
Executive Director
Digital Governance Standards Institute
darryl.kingston@dgc-cgn.org
For further details or media inquiries, please contact:
Shyra Wells
Communications and Knowledge Mobilization Lead
Digital Governance Council
shyra.craig@dgc-cgn.org
About the Digital Governance Standards Institute
The Digital Governance Standards Institute develops digital technology governance standards fit for global use. The Institute works with experts, as well as national and global partners and the public to develop national standards that reduce risk to Canadians and Canadian organizations adopting and using innovative digital technologies in today’s digital economy. The Institute is an independent division of the Digital Governance Council. To learn more about the organization and its initiatives, visit www.dgc-cgn.org or contact info@dgc-cgn.org.