Skip to main content
Privacy Horizon
Privacy & Security

Privacy & Security Services in Fredericton

End-to-end privacy and security support for organizations in Fredericton.

As New Brunswick's provincial capital, Fredericton is home to government contractors, technology companies, professional services firms, and educational institutions — all subject to federal PIPEDA for their private-sector commercial activity. The Office of the Privacy Commissioner of Canada oversees PIPEDA compliance, and its ten fair information principles set the benchmark for how organizations must manage personal information from collection through disposal. New Brunswick has not enacted a general private-sector privacy law. The province's Personal Health Information Privacy and Access Act (PHIPAA) applies specifically to health information custodians, overseen by the Office of the Ombud for New Brunswick, but does not extend to general commercial activity. For most Fredericton businesses, PIPEDA is the applicable framework, full stop.

The federal framework is not difficult to understand in principle, but applying it to the specifics of a real organization takes deliberate work. Consent requirements depend on what information you are collecting and why. Safeguard obligations scale with the sensitivity of the data you hold. Breach reporting to the Privacy Commissioner is triggered by real risk of significant harm, a standard that requires judgment, documentation, and a response process that most organizations have not built in advance. Privacy Horizon works with Fredericton organizations to close those gaps before they become incidents, and to build programs that reflect the actual risk profile of your business.

Our services for New Brunswick clients include Privacy Impact Assessments that examine the privacy implications of new systems, programs, or vendor arrangements before they go live. Gap analyses give you a clear picture of where your current practices stand against PIPEDA's requirements and identify the highest-priority items to address. Guided compliance programs translate that analysis into documented policies, procedures, and accountability structures. Threat and risk assessments examine the security posture underneath your privacy program. On-call advisory provides senior-level support when your team faces questions that require accurate, experienced judgment. And custom training gives the people in your organization who handle personal information the understanding they need to do so responsibly.

Privacy & security regulation in Fredericton

Regulator: Office of the Ombud for New Brunswick

Fredericton businesses are governed by Canada's federal private-sector privacy law, PIPEDA, overseen by the Office of the Privacy Commissioner of Canada. Personal health information in New Brunswick is separately governed by the Personal Health Information Privacy and Access Act (PHIPAA), with oversight by the Office of the Ombud for New Brunswick.

PIPEDAPersonal Information Protection and Electronic Documents Act

PIPEDA is Canada's federal private-sector privacy law. It sets out ten fair information principles governing how organizations collect, use, and disclose personal information in the course of commercial activity. It applies wherever a province has not enacted substantially similar legislation — and, even in provinces that have (Alberta, British Columbia, Québec), it continues to apply to federally regulated businesses such as banks, airlines, and telecommunications, and to personal information that flows across provincial or national borders.

Read the legislation

PHIPAA (New Brunswick)Personal Health Information Privacy and Access Act (New Brunswick)

New Brunswick's health-sector privacy law (SNB 2009, c. P-7.05), which gives individuals the right to access and request correction of their personal health information and sets out custodians' privacy obligations. It is deemed substantially similar to PIPEDA for health information custodians. Oversight is by the Office of the Ombud for New Brunswick. General private-sector commercial activity is governed by federal PIPEDA.

Read the legislation

What Privacy & Security includes

From assessments to compliance programs and ongoing advisory, we provide the full range of privacy and security support organizations need under Canadian law.

Assessments

Privacy impact assessments, threat & risk assessments, and gap analysis.

Compliance Programs

Guided programs to reach and maintain compliance.

Advisory

On-call senior privacy and security guidance.

Training

Practical training for staff and leadership.

Government contractors and the PIPEDA threshold

Fredericton's economy includes a significant cluster of organizations that contract with provincial and federal government bodies. Where those contracts involve commercial activity and the handling of personal information, PIPEDA applies. Government contractors that collect, use, or disclose personal information on behalf of private-sector clients — or that handle employee data in the normal course of operations — are within the federal law's scope. Privacy Horizon helps Fredericton contractors understand exactly where PIPEDA applies to their work, what a compliant program looks like, and how to demonstrate that accountability to both government clients and to the Office of the Privacy Commissioner.

Building breach readiness before an incident forces it

PIPEDA's mandatory breach reporting obligations require organizations to report breaches to the Privacy Commissioner where there is a real risk of significant harm, and to notify affected individuals. Meeting that standard in a real incident requires having a documented response process, clear internal roles, and the judgment to assess risk accurately under pressure. Most organizations do not build that capability until after their first significant breach — which is the worst time to start. Privacy Horizon helps Fredericton businesses develop breach response programs proactively, including the threat and risk assessments that establish your baseline security posture and the policies that govern how incidents are identified, assessed, and escalated.

What's Protecting Your Business from the Next Threat?

Don't wait for a breach to expose your vulnerabilities. Let Privacy Horizon secure your data, ensure compliance, and build lasting trust.