The Digital Governance Standards Institute (DGSI) is inviting all interested stakeholders to review CAN/DGSI 100-2:2022 (Rev 1:2024), Data Governance – Part 2: Third-Party Access to Data, as it undergoes its periodic maintenance review. As data ecosystems become increasingly complex and interconnected, organizations face growing challenges in managing third-party access securely while maintaining compliance with evolving regulatory frameworks. Whether working with vendors, cloud service providers, or business partners, organizations must balance innovation with privacy protection and risk mitigation.
To address these challenges, CAN/DGSI 100-2 establishes clear principles, policies, and controls for managing third-party data access in a way that ensures transparency, accountability, and security across industries.
Why This Review Matters
Data governance is not static—as technology advances, so too must the policies and standards that protect sensitive business and personal information. The periodic maintenance review of CAN/DGSI 100-2 is a critical opportunity to align the standard with emerging best practices, regulatory updates, and industry needs.
The review process, which begins one year from the date of publication, may result in a new edition, revision, reaffirmation, or withdrawal of the Standard. This ensures that organizations across Canada can continue to rely on this framework for effective third-party data access management.
DGSI encourages all stakeholders—including industry professionals, technology experts, policymakers, privacy advocates, and business leaders—to actively participate in the review process and contribute their insights to strengthen this essential standard.
Key Aspects of the Standard Under Review
– Access Governance & Control – Defining policies for granting, monitoring, and revoking third-party access based on risk assessments.
– Privacy & Compliance – Ensuring alignment with Canadian laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and other global data protection frameworks.
– Security & Risk Management – Establishing robust security measures to prevent unauthorized access, breaches, and misuse of sensitive data.
– Audit & Accountability – Mandating audit trails and compliance monitoring to enhance transparency and trust in third-party relationships.
– Data Integrity & Availability – Protecting data from corruption, ensuring it remains accurate, available, and accessible to authorized parties.
How to Get Involved
This is your opportunity to help shape the future of data governance in Canada. DGSI welcomes feedback from organizations of all sizes and sectors to ensure the revised standard reflects the latest technological advancements, industry challenges, and regulatory expectations.
To review the updated edition and submit feedback, please visit CAN/DGSI 100-2. The deadline for comments is June 11 2025.
Darryl Kingston
Executive Director
Digital Governance Standards Institute
darryl.kingston@dgc-cgn.org
For further details or media inquiries, please contact:
Shyra Wells
Communications and Knowledge Mobilization Lead
Digital Governance Council
shyra.craig@dgc-cgn.org
About the Digital Governance Standards Institute
The Digital Governance Standards Institute develops digital technology governance standards fit for global use. The Institute works with experts, as well as national and global partners and the public to develop national standards that reduce risk to Canadians and Canadian organizations adopting and using innovative digital technologies in today’s digital economy. The Institute is an independent division of the Digital Governance Council. To learn more about the organization and its initiatives, visit www.dgc-cgn.org or contact info@dgc-cgn.org.