CanucktAI
Privacy Academy

Learn Canadian Privacy Law

Free, practical guides on PIPEDA, Quebec Law 25, and CASL — written for Canadian business owners, not lawyers. No jargon. No paywalls. Just what you need to know.

Free Courses

Six full courses on the law that applies to you

Federal · Free7 modules · 2h 25m

PIPEDA Complete Guide

Canada's federal private-sector privacy law. Who it applies to, what it requires, the 10 Fair Information Principles, and what happens when you get it wrong.

33 knowledge-check questions · bilingual · free, no signup

  • Who PIPEDA applies to
  • The 10 Fair Information Principles
  • Consent requirements
  • Breach reporting obligations
  • OPC complaints & enforcement
Read the PIPEDA Guide
Québec · Free8 modules · 3h 25m

Law 25 Complete Guide

Quebec's Law 25 is stricter than PIPEDA and applies to any business that handles data of Quebec residents — including businesses outside Quebec.

24 knowledge-check questions · bilingual · free, no signup

  • How Law 25 differs from PIPEDA
  • Privacy Impact Assessments (PIAs)
  • Mandatory 72-hr breach reporting to CAI
  • Data retention & destruction rules
  • Penalties up to 4% of global revenue
Read the Law 25 Guide
Federal · Free7 modules · 2h 30m

CASL Complete Guide

Canada's Anti-Spam Legislation. Every business that sends marketing email to Canadians must comply — and fines reach $10M per violation.

21 knowledge-check questions · bilingual · free, no signup

  • Express vs. implied consent
  • The 2-year implied consent window
  • Unsubscribe requirements (10 days)
  • CRTC enforcement & $10M fines
  • CASL vs. CAN-SPAM vs. GDPR
Read the CASL Guide
AI Governance · Free8 modules · 3h 34m

AI Governance Guide

Govern the AI your organization builds and uses — inventory, risk classification, policies, and accountability. The foundation under ISO 42001, the EU AI Act, and Canada's AIDA.

29 knowledge-check questions · bilingual · free, no signup

  • What AI governance is (and why now)
  • Building an AI system inventory
  • Classifying AI risk
  • Policies, human oversight & bias testing
  • Roles, accountability & the frameworks landscape
Read the AI Governance Guide
EU · Global · Free8 modules · 3h 24m

EU AI Act Guide

The world's first comprehensive AI law reaches Canadian businesses whose AI outputs touch the EU. Risk tiers, obligations, timelines, and penalties up to €35M.

30 knowledge-check questions · bilingual · free, no signup

  • Why it applies to Canadian companies
  • The four risk tiers
  • Provider vs. deployer obligations
  • High-risk requirements & FRIA
  • Timeline & penalties (up to 7% of turnover)
Read the EU AI Act Guide
ISO · Free8 modules · 3h 22m

ISO 42001 Guide

The first certifiable AI management system standard. Build an AIMS, map the Annex A controls, and get certified to prove responsible AI to customers and regulators.

32 knowledge-check questions · bilingual · free, no signup

  • What an AI management system (AIMS) is
  • The Annex SL clause structure
  • Annex A controls & impact assessment
  • How it maps to ISO 27001 & the EU AI Act
  • The certification process
Read the ISO 42001 Guide
Learning Paths

Two routes through, in the right order

Six courses is a library. These are the two sequences that actually make someone competent — take them in order, or pick the single course you need.

Canadian Privacy Officer

The three laws a Canadian privacy lead is accountable for, in the order they build on each other: the federal baseline, then Quebec’s stricter regime, then the separate anti-spam rules that catch most organizations out.

  1. 1PIPEDA Complete Guide7 modules · 2h 25m
  2. 2Law 25 Complete Guide8 modules · 3h 25m
  3. 3CASL Complete Guide7 modules · 2h 30m
Privacy officers, compliance leads, founders who just became the privacy person
22 modules · 8h 20m
See the path

AI Governance

From governing AI in general, to the specific obligations of the EU AI Act, to the certifiable management system that proves it. Written for the person who has to answer for an AI system, not build one.

  1. 1AI Governance Guide8 modules · 3h 34m
  2. 2EU AI Act Guide8 modules · 3h 24m
  3. 3ISO 42001 Guide8 modules · 3h 22m
Compliance and risk teams, AI leads, anyone answering an AI governance questionnaire
24 modules · 10h 20m
See the path
Why This Matters

Canadian privacy law is not optional — and it's not American

87%of Canadian SMBs have at least one material PIPEDA gap

Most don't know it until a complaint is filed.

$10Mmaximum CASL fine per violation

Fines have been issued to Canadian companies of every size.

72 hrsto report a data breach under Law 25

Miss this window and the fine doubles.

0US privacy tools that cover Law 25 by default

Quebec's law requires specific features that American tools don't have.

Put Knowledge into Practice

Learning is step one. Compliance is step two.

Start Free — No Credit Card

Shielk

Automatically anonymizes PII before it reaches AI tools. PIPEDA compliance certificates on every job.

Start Free — No Credit Card

Valdra

Runs your PIPEDA, Law 25, and CASL assessments. Generates the documents these guides describe — automatically.

Start Free — No Credit Card
Common Questions

About Canadian Privacy Law

Our own compliance

We run our own compliance programme inside Valdra — the product we sell. Our SOC 2, ISO 27001 and ISO 42001 programmes are actively in progress; we do not claim certifications we do not yet hold.

Valdra compliance badge — click to verify
  • PIPEDA
  • Law 25 (Quebec)
  • CASL
  • Data hosted in Canada 🇨🇦
  • AI governance
View our Trust Centre

Self-declared, not audited by a third party. Click the badge to verify it is genuine and see what it covers.

Privacy Academy — Free Canadian Privacy Courses | Canuckt AI