Privacy & Security Consulting in New Brunswick

New Brunswick businesses are governed by Canada's federal privacy law, PIPEDA, for commercial activity, with oversight from the Office of the Privacy Commissioner of Canada. The law imposes substantive obligations that go beyond having a privacy policy — organizations must establish an accountability framework, obtain meaningful consent, limit collection to what is genuinely necessary, manage vendors who handle personal information on their behalf, and respond to breaches with documented assessments and timely notifications to the Commissioner and to affected individuals where there is a real risk of significant harm. For New Brunswick's health sector, the Personal Health Information Privacy and Access Act (PHIPAA) governs how custodians handle personal health information, with oversight from the Office of the Ombud for New Brunswick. PHIPAA gives individuals rights to access and correct their health information under a framework deemed substantially similar to PIPEDA for health information custodians.

Privacy Horizon works with New Brunswick organizations to build privacy and security programs that translate those requirements into operating reality. The province's economy includes a significant bilingual public-sector presence, financial services, technology, and a substantial healthcare system — and the privacy challenges facing each sector are genuinely different. Our advisors do not apply the same template to every engagement. We start by understanding your organization's data flows, vendor relationships, and current practices, and identify the gaps that carry the most meaningful risk. From there, we build solutions that fit how your business actually operates.

The work we do in New Brunswick spans the full range of what organizations genuinely need. Privacy and security coaching builds internal capability in teams navigating data obligations without dedicated resources. Policy development produces the accountability documentation that satisfies regulators and enterprise customers conducting vendor assessments. Virtual Privacy Officer and Virtual CISO arrangements provide ongoing senior expertise without the overhead of a full-time hire. M&A due diligence brings privacy and security risk into deal processes before they become post-close surprises. Custom training ensures that the people handling personal information day-to-day understand their obligations and know how to respond when something unexpected happens.