algorithmic transparency. when users have complete information about the workings of the artificial intelligence programs behind the websites they visit, the data they collect and how they are used

CASL. Canada’s Anti-spam Law

CJEU. Court of Justice of the European Union

CRTC. Canadian Radio-television and Telecommunications Commission

depersonalized data. data that has been aggregated and presented in such a way that it is impossible to identify the owner (also known as “anonymous” or “de-identified” data)

EU. European Union

GDPR. the European Union General Data Protection Regulation, which will come into force in May 2018

Model Code. Model Code for the Protection of Personal Information developed by the Standards Council of Canada, reproduced in Schedule 1 of the Personal Information Protection and Electronic Documents Act and to the principles of which organizations are required to adhere

OPC. Office of the Privacy Commissioner of Canada

PIPEDA. Personal Information Protection and Electronic Documents Act, which applies to the private sector

Privacy Act. which applies to the public sector

right to be forgotten. usually refers to one of the following two concepts:

• “right to erasure”—the right to have information removed from a website
• “right to de-indexing” (or “right to dereferencing ” or “right to delisting”)—the right to have a website containing personal information removed from the results of search engines such as Google