Which privacy regime(s) apply to you?
Answer six quick questions and we'll list every regime that likely applies — Canadian federal or provincial law, plus GDPR where relevant. You'll still pick one as the primary regime to score against below.
Where does your organization primarily operate? *
Wholly in British Columbia Wholly in Alberta Wholly in Quebec Wholly in Ontario Another single Canadian province Multiple provinces / national
Are you a federally regulated business? *
Banks, telecoms, airlines, interprovincial transport, federal Crown corporations, etc.
Yes No
Do you collect or share personal data across provincial or international borders? *
Yes No
Do you handle the personal information of Quebec residents? *
If yes, Quebec Law 25 applies — even if you are not physically in Quebec.
Yes No
Do you handle personal health information in Ontario as a custodian or agent? *
Hospitals, clinics, pharmacies, digital-health vendors acting for a custodian, etc.
Yes No
Do you offer goods or services to, or monitor the behaviour of, individuals in the EU or UK? *
If yes, GDPR / UK GDPR applies extraterritorially.
Yes No
Collection notice (Canadian privacy laws · GDPR where applicable)
ÓRIVON Consulting Inc. collects the details and answers you submit on this form to (1) score your privacy maturity and email you the report, and (2) — only with your consent below — follow up about how we can help close the gaps it surfaces. Submissions are kept for up to 24 months and stored with our hosting provider, which may process data outside Canada. We do not sell or share your information. You can access, correct or delete it, or withdraw consent, at any time by emailing privacy@orivongrc.com . See our Privacy notice .
