The Digital Governance Standards Institute (DGSI) has reaffirmed CAN/DGSI 100-2, Data Governance – Part 2: Third Party Access to Data, as a National Standard of Canada. First published in 2022 and then revised in 2024, the standard has completed its scheduled review by Technical Committee 1 (TC 1) on data governance, which includes more than 250 experts from public and private sector and across various sectors of importance to the Canadian economy.
As organizations deepen digital collaboration with vendors, cloud providers, and service partners, the ability to manage third party data access securely and transparently is more important than ever. This reaffirmation confirms that the standard remains aligned with current regulatory expectations and industry best practices and continues to provide essential guidance for privacy-preserving, risk-aware data sharing.
“Third party access is an operational necessity in today’s digital environment, but it must be governed with care. This reaffirmation reflects Canada’s ongoing leadership in upholding rigorous standards for data protection, transparency, and trust.” – Darryl Kingston, Executive Director of the Digital Governance Standards Institute
Key Elements of the Standard
- Access Governance and Control: Establishes clear policies for granting, monitoring, and revoking third party access to data
- Security and Risk Management: Requires protections in line with the AICPA Trust Services Criteria for confidentiality, privacy, and integrity
- Auditability and Accountability: Mandates audit trails and annual compliance reviews to ensure adherence
- Privacy and Legal Alignment: Aligns with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable laws
- System Integrity and Transparency: Promotes consolidated records for all internal and external data access and related policy changes
This standard applies to all organizations including public, private, and nonprofit entities that grant and control third party access to data. It sets out minimum requirements to ensure secure, auditable, and privacy-compliant data-sharing practices across sectors.
For more information or to access the standard, visit CAN/DGSI 100-2
Get involved
The DGSI’s development process is collaborative and open to all, and anyone interested in contributing to the development of digital governance standards is encouraged to get involved. For more information on how to participate, contact:
Darryl Kingston
Executive Director
Digital Governance Standards Institute
darryl.kingston@dgc-cgn.org
For further details or media inquiries, please contact:
Shyra Wells
Communications and Knowledge Mobilization Lead
Digital Governance Council
shyra.craig@dgc-cgn.org
About the Digital Governance Standards Institute
The Digital Governance Standards Institute develops digital technology governance standards fit for global use. The Institute works with experts, as well as national and global partners and the public to develop national standards that reduce risk to Canadians and Canadian organizations adopting and using innovative digital technologies in today’s digital economy. The Institute is an independent division of the Digital Governance Council. To learn more about the organization and its initiatives, visit www.dgc-cgn.org or contact info@dgc-cgn.org.