Stop reading
statutes alone
Every Canadian privacy and health law your business may face — explained in plain English (and French). Four sections per law: what it requires, who it applies to, what regulators enforce, and the penalty exposure. No law-school degree required.
more personal data found than businesses expect during discovery
1 Canuckt Data Discovery Report, 2025
Start Free Assessment| Processing Activity | Legal Basis | Data Categories | Retention |
|---|---|---|---|
| Customer Onboarding | Contract | Name, Email, ID | 7 years |
| Email Marketing | Consent | Email, Preferences | Until withdrawal |
| Analytics | Legitimate | Usage, Device | 2 years |
| HR Processing | Contract | SIN, Banking | 7 years |
Find personal data you didn't know you had.
Canuckt's discovery engine scans your connected systems — CRM, cloud storage, email, databases — and surfaces personal information flows you didn't know existed. Average businesses find 3.5× more PII than expected.
Request a demo| Processing Activity | Legal Basis | Data Categories | Retention |
|---|---|---|---|
| Customer Onboarding | Contract | Name, Email, ID | 7 years |
| Email Marketing | Consent | Email, Preferences | Until withdrawal |
| Analytics | Legitimate | Usage, Device | 2 years |
| HR Processing | Contract | SIN, Banking | 7 years |
Automated Records of Processing Activities.
Law 25 and PIPEDA require documented data inventories. Valdra automatically maintains your ROPA as your systems change — new integrations, new vendors, new data types are detected and logged.
Request a demoAdditional features
Request a demo14 Laws Covered
PIPEDA, Law 25 (Quebec), CASL, AB PIPA, BC PIPA + 8 provincial health acts (PHIPA ON, PHIA NS, PHIPAA NB, PHIA NL, HIA AB, HIPA SK, PHIA MB, HIA PE) + Bill C-27 horizon-scanning.
Four-Section Format
Per law: (1) What it requires (2) Who it applies to (3) Enforcement body (4) Penalty exposure. Same structure across all 14 laws for fast comparison.
Bilingual (EN / FR)
Every summary is hand-translated, not machine-translated. Law 25 + Quebec subscribers expect French; the rest of Canada expects English.
Cited Statutory Sections
Every claim links to the specific section of the statute. Click "Law 25 art. 17" — see the actual statutory text.
Quarterly Refresh
When OPC issues new guidance, CAI publishes a ruling, or a court interprets a section, the summary is refreshed within a week.
Industry Filters
Show me only the laws that apply to healthcare in Ontario / fintech in Quebec / SaaS across Canada. Hide the rest.
“Law 25 requires a data inventory we estimated would take 6 months to build manually. Canuckt's data discovery had our ROPA populated and mapped in under a week.
SLSophie LavoiePrivacy Lead · Quebec Health Network
Learn more about Valdra
Get compliant and build trust
Join hundreds of Canadian organizations using Valdra to automate their privacy obligations — no consultants required.
🍁 Canadian data residency · PIPEDA compliant · SOC 2 in progress