Dentons Data

Home
Services and solutions
Transformative Technology and Data Strategy
Dentons Data

Dentons Data

Solutions for every business

{A0C47880-AE22-456D-A7B0-19BF11C4A4BC}

The first of its kind in Canada, Dentons Data is a full suite of phased, scalable solutions, empowering businesses to solve their data problems. Dentons Data is adaptable to any budget and any business, no matter where it is in its data lifecycle.

Our current suite of solutions includes:

End-to-End Privacy and Cybersecurity Readiness and Response
Data Strategy Map
Compliance Agility Assessment

Read more about what services we offer with each solution below.

Not sure what Dentons Data services are best for you? Contact us to arrange a Solutions Assessment at no charge.

End-to-End Privacy and Cybersecurity Readiness and Response Solution

As companies intensify their use of sophisticated technologies, migrate to the cloud, and rely more and more on service providers that access their systems, their data, or both, digital resiliency becomes increasingly important – and increasingly challenging. Dentons can help businesses evaluate the unique threats they face, prepare them manage to these risks, and assist them in responding effectively in the event these risk materialize, as well as recover, rebound and move forward if things go wrong.

Our services are modular and businesses are able to build their informational resiliency by selecting what they need from a menu of proven solutions

Evaluate

We work with you to prepare a comprehensive understanding of your organization’s specific challenges:

We identify your business’ unique threat profile, build a Risk Framework of your legal and technical obligations and risk, and assess your incident response readiness. Our risk framework can include:

Third Party Data Assessment so you can understand your existing contractual obligations and those you have imposed on others.
Security Assessments such as penetration testing, IT security assessment, active directory assessment, and cyber insurance risk assessment.

We build on the risk framework to provide an Integrated Risk Analysis: legal and technical advice to help you address your obligations and close any gaps.
We can provide a Digital Resilience Assessment to give your senior leadership team and board members clear insights about your organization’s data security capacity.
Dentons’ Privilege Playbook allows us to offer privileged legal advice addressing your processes.

Prepare

Preparation before an incident is one of the key factors determining the outcome after an incident.
Dentons can help you prepare well in advance:

No matter the size of your organizations, we help you prepare an Incident Response Plans or we can evaluate and review your existing plans keeping them current with our innovative Audit and Update Service.
We can also provide a Data Breach Playbook, a plain language summary of identity-tailored action steps.
Our Customized Cyber Simulations designed for your environment, including scenarios tailored to board/management roles and the legal function.
Our unique Advanced Retainer Solution means that when an incident occurs, all necessary external resources (e.g., forensics, PR/GR services, credit monitoring, etc.) are already in place and familiar with your environment and your people.
We have modular and scalable privacy, CASL, and data security Programs, Policies, and Training Package or we can evaluate and review your existing materials.
Dentons nimble Privacy Impact Assessments provide you with a rapid understanding of your privacy risk related to new ventures, business lines and technologies.

Respond

A serious data incident requires an organization to manage multiple competing pressures.
Few organizations are equipped to do this and fewer still know what to expect. Dentons can help you respond effectively:

We assign a dedicated response team and mobilize quickly across multiple jurisdictions.
We can also provide Coordinating Counsel services, acting as an interface between your incident response team and multiple outside parties and stakeholders, leaving you free to focus on your business.
We provide litigation and class action defence, and have deep regulatory relationships with privacy commissioners, foreign data protection authorities, sector-specific regulators (e.g., CRTC, OSFI, securities commissions, FINTRAC, etc.), law enforcement and others to provide seamless and highly integrated Litigation and Regulatory Management services.
We can implement the privilege protocol we prepared with you as part of our Privilege Playbook.
We can provide integrated Crisis Management services you need in order to deliver the right message, both to the public and to government.
Once the incident is closed, Dentons can provides Post-incident Review that includes an assessment of decision-making during the incident and provides actionable insights.

Data Strategy Mapping Solution

Data is a key business asset and the entry to participation in the digital economy. Digital transformation without data discipline is doomed. Businesses need to create data strategies that account for current business and technology commitments while also addressing new goals and objectives. Our Data Strategy solution helps you plan for how to improve all of the ways you acquire, store, manage, share and use data.

We help you identify your goals and objectives using our Goals and Objectives Framework. Then, we look at the ways in which your organization collects and uses information, analyze the information processed, and create a Data Map. We identify the restrictions on the uses of such information – privacy, contractual, proprietary, regulatory, etc., – and build a ComprehensiveData Inventory.

We then work with you examine the needs of your business mapped against the gamut of data that may be available. This produces a Value Roadmap of extracting value from data, and how IT architecture may need to evolve to support that vision. The final piece of an organization’s data strategy is our Data Protection and Retention solution, and we work with you to define how various data elements must be maintained long term to satisfy both corporate needs and legal obligations – including defensible destruction and anonymization processes and the management of exceptions (such as litigation holds).

Compliance Agility Assessment

General Counsel consistently report that managing regulatory compliance is increasingly complex and demanding. This is no less true in the realm of data, where multi-jurisdictional privacy, data protection, anti-spam and sector-specific requirements are rapidly becoming overwhelming.

Dentons can help – with our Compliance Agility Assessment; you gain an understanding of your organization’s ability to meet regulatory expectations. Our assessment goes beyond checkbox metrics, and provides a deep understanding of your organization’s regulatory change-management processes and resiliency, and its overall compliance processes.

Once completed, we provide you with a comprehensive report:

Addressing your preparedness to meet regulatory requirements.
Providing you with a gap analysis and improvement areas.
Advising you growth strategies and new business opportunities related to your data assets.

Not restricted to data, our Compliance Agility Assessment can be used across all compliance control functions on an enterprise wide basis.

Experience

Dentons multi-disciplinary data teams have deep expertise in all aspects of data and the regulatory landscape:

We assisted a large multinational technology company manage the new mandatory privacy breach reporting regime under PIPEDA, and were one of the first to do so. We helped a client challenge a regulator’s determination that an incident created “a real risk of significant harm” requiring customer notification.
We are adept at new technologies: we’ve helped a financial services company respond to a data incident in respect of its artificial intelligence application, considered whether facial detection/recognition systems “collect” personal information, advised on complex, multi-party electoral-driven targeted behavioural advertising, and made recommendations for a privacy program for a company’s use of commercial drones.
We helped Canadian and international businesses comply with their obligations under the GDPR.
We advised on the New York Department of Financial Services NYDFS Cybersecurity Regulation (23 NYCRR 500) and its applicability to Canadian entities in the financial services sector.
We helped organizations comply with the OSFI Technology and Cyber Security Incident Reporting Advisory (including the mandatory 72-hour reporting window), and assisted them in managing and triaging competing reporting and disclosure obligations.
We worked with organizations to develop and optimize their data-driven business models in the complex, highly regulated health care sector.
We defended business in some of the largest North American and global data breaches and have proven expertise in managing data incidents across borders.
We defended claims of privilege over IT forensic reports and assessments and successfully kept them from being disclosed to both a regulator and in litigation.
We responded to data incidents and Freedom of Information requests in the cannabis sector.

Recognition

Dentons wins at IT World Canada’s Digital Transformation Awards 2020 for Dentons Data

July 27, 2020

Dentons is proud to be acknowledged by IT World Canada (ITWC) for using technology to push the boundaries within a traditionally conservative marketplace. The Firm topped five other finalists in the Large Private Sector category of the ITWC 2020 Digital Transformation Awards, which were announced in July, 2020.

Insights

Cyber security information sharing under the new EU regulations

November 17, 2023

Europe: The following is a summary of eighteen cases in which – according to the provisions of the NIS 2 Directive and the DORA Regulation – the exchange of information on incidents and cyber threats, as well as other information related to cyber security, should take place.

Addressing Intra And Inter-Country Differences In Privacy Law Reform – The Canadian Challenge And Strategies

February 9, 2022

Canada: As privacy law reform legislation multiplies in Canada, each pursuing its own direction, around the world privacy law reform is also splintering through varied legislative developments.

Top 10 trends in Canadian privacy law reform and actions to take now

January 25, 2022

The privacy regulatory framework is anything but static. Québec’s Bill 64, An Act to modernize legislative provisions as regards the protection of personal information received assent on September 22, 2021, introducing entirely new concepts in Canadian privacy law.

View all insights for Dentons Data

News and Events

Kirsten Thompson – Quoted in “Rise in cashless payments stokes concerns over data security", The Globe and Mail, March 31, 2019.
Kirsten Thompson – Quoted in "Talkative homebuyers beware, the seller might be listening", CBC Radio, January 16, 2019
Adam Allouba – Interviewed, "Paiements en bitcoins, une bonne idée pour votre cabinet?", Droit-Inc., November 19, 2018
Adam Allouba – Quoted in "Dentons, premier cabinet canadien dans un consortium sur la blockchain", Droit-Inc., February 2018
Tracy Molino – Mentioned in "How Dentons Canada’s Tracy Molino is Modernizing Finance with Blockchain", Coinsquare, October 28, 2018
Tracy Molino – Quoted in "Payments lawyers disappointed by SCC ruling," Law Times, March 5, 2018
Kirsten Thompson – Quoted in "Proposed PIPEDA Regulations will raise corporate obligations", Canadian Lawyer, September 2017
Kirsten Thompson – Quoted in “Getting ready for GDPR”, Canadian Lawyer, April 2017

Dentons Data

Dentons Data