01 / In practice
Map the information
We establish what information enters the organisation, why it is needed, where it goes and who can reach it. The map becomes the basis for legal analysis.
Areas of practice
Privacy & data protection
Privacy advice starts with the information an organisation collects, its purposes and the people who control access. Ruchi Bindra helps translate privacy obligations into notices, agreements, assessments and operational processes. Her work connects Canadian and cross-border requirements with the actual data flows, with local legal advice coordinated where required.
The problem, made practical
What does this service cover?
- Privacy governance and policy design under PIPEDA, Alberta PIPA and relevant provincial requirements, including Quebec Law 25.
- GDPR and cross-border privacy readiness, with locally licensed counsel coordinated where required.
- Data-flow reviews, minimisation, retention, access governance and responsibilities for service providers.
- Privacy program documentation that connects legal requirements, technical controls and accountable decision-makers.
How does the engagement work?
02 / In practice
Connect duties to controls
I assess the relevant frameworks and translate them into working policies, contractual requirements and design decisions. Where jurisdictions overlap, we make the differences explicit.
03 / In practice
Make the program usable
We clarify ownership and the records that demonstrate implementation. A privacy program needs to support everyday decisions as well as scrutiny during diligence or a review.
Before we begin
What should you know before engaging counsel?
Is a privacy policy enough?
A public notice explains commitments. It cannot, on its own, show that retention, access and sharing practices support them. I review the underlying operation as well as the document.
Which Canadian privacy law applies?
That depends on the organisation, its activities, the information and its movement across borders. Federal, provincial and health-specific rules need to be considered in context.
Do privacy credentials mean admission in those jurisdictions?
No. They demonstrate subject-matter knowledge. My bar admission is in Alberta; advice on other jurisdictions’ laws is coordinated with locally licensed counsel where required.
Which related topics should you explore?
Let’s start a conversation
Bring the hard question early.
Tell me what you are building, where it will operate, and the decision in front of you. Please leave sensitive details for an agreed channel.