Companies that conduct business in Canada or collect data from Canada will need to make significant changes going forward to comply with the recently enacted Digital Privacy Act. As Kirsten Thompson, Daniel G.C. Glover and Marissa Caldwell of McCarthy Tétrault explain, the substantial regulation mandates breach notification, imposes new consent requirements and significant fines, and changes the confidentiality requirements within government investigations. In addition, it gives the Office of the Privacy Commission of Canada an enforcement role. Even companies with no Canadian presence are looking closely at this legislation as the U.S., Europe and other countries debate legislative proposals of their own.