PRIMARY SOURCES

Context you can check.

Selected official references informing the resource library. These references do not imply endorsement, certification or a determination of the laws that apply to your organisation.

An engraved compass, reviewed records and calibrated scales; a metaphor for explainable data quality. — CONCEPTUAL ENGRAVING / DATAGOVERNANCE.CA

Office of the Privacy Commissioner of Canada

PIPEDA: Accountability

Official guidance for organisations subject to PIPEDA. It connects accountability to a responsible official and implemented privacy practices.

Checked 13 October 2026.

Read the official source

Office of the Privacy Commissioner of Canada

Assessing third-party service providers

Published September 10, 2026. The OPC is accepting comments until December 4, 2026 and may revise the guidance. It is guidance, not a new certification regime.

Checked 13 October 2026.

Read the official source

National Institute of Standards and Technology

AI Risk Management Framework

Voluntary AI risk-management framework. NIST states that AI RMF 1.0 is being revised; confirm the applicable version when planning an engagement.

Checked 13 October 2026.

Read the official source