Privacy & Security Services in Saint John

Saint John is New Brunswick's industrial and port hub — an economy anchored by energy, manufacturing, logistics, and a growing services sector. These industries handle diverse personal information: customer records, employee data, and operational data tied to contracts and supply chains. Federal PIPEDA is the governing framework for private-sector commercial activity, administered by the Office of the Privacy Commissioner of Canada. New Brunswick has not enacted a general private-sector privacy law, so PIPEDA's ten fair information principles apply directly to commercial organizations in the province. The Personal Health Information Privacy and Access Act (PHIPAA) creates a separate layer for health information custodians, overseen by the Office of the Ombud for New Brunswick, but does not apply to general commercial activity.

Industrial and logistics organizations sometimes underestimate their privacy exposure on the assumption that they are not in the data business. In practice, any organization that collects personal information from customers, manages employee records, or shares data with service providers has obligations under PIPEDA — and those obligations include meaningful safeguards, documented consent practices, and the ability to respond to a breach in a way that satisfies the regulatory standard. Privacy Horizon works with Saint John organizations to assess that exposure honestly, identify where current practices fall short, and build programs that close the gaps without unnecessary overhead.

Our service offering for New Brunswick clients covers the full picture. Privacy Impact Assessments examine the privacy risks in new systems, processes, or vendor arrangements before they create liability. Threat and risk assessments address the security controls that protect the personal information you hold. Gap analyses measure your current program against PIPEDA's requirements and produce a prioritized remediation road map. Guided compliance programs put documented policies, procedures, and roles in place. On-call senior advisory gives your team access to experienced practitioners when an incident, customer inquiry, or regulatory question requires a confident answer. Custom training ensures that the people in your organization who make decisions about personal information understand what responsible stewardship requires in day-to-day operations.