A PRACTICAL APPROACH TO PRIVACY
WHAT WE DO
We work with businesses to find practical solutions for protecting data in a way that balances a complex legislative environment with the digital age.
We specialize in working with clients across multiple industries, including the health care, pharmaceutical, retail, and education sectors.
MICHELLE GORDON
LLB, LLM
As the founder of GEM Privacy, Michelle works with clients to navigate their privacy requirements and develop strategies to proactively manage their privacy risks. She has over 15 years of privacy consulting experience from Deloitte LLP and a boutique consulting firm, where she developed and implemented privacy programs for startups, government bodies, and multinational corporations.
Michelle works with clients in the health care, pharmaceutical, education, and technology industries. She regularly acts as on-demand privacy counsel, conducts privacy research, and develops privacy management frameworks.
Michelle brings her passion for children’s privacy and digital literacy to her work with clients in the education technology sector. She strives to ensure that companies understand how to properly protect children’s personal information in the digital environment while balancing business needs.
Michelle received her Bachelor of Laws from the University of Ottawa, where she first developed her interest in privacy law, and her Master of Laws from the University of Toronto, where she wrote a thesis on electronic health records and privacy.
Michelle lives in Toronto, Canada with her husband and three imaginative boys. As a dedicated community volunteer, she sits on the Board of Directors of a private day school and completed a term as a legal member on a Toronto hospital’s Research Ethics Board.
OUR SERVICES
FREELANCE PRIVACY COUNSEL
-
Act as on-demand, freelance privacy counsel for Ontario and Canadian organizations seeking to fill a specialized need in their in-house department
-
Conduct reviews of privacy-related agreements and contracts
PRIVACY PROGRAM DEVELOPMENT
-
Develop privacy program management frameworks, from strategy to implementation
-
Draft policies, processes, and guidelines to support privacy functions across the organization
PRIVACY RESEARCH
-
Conduct privacy research based on Canadian, Ontario, and provincial laws and regulations
-
Support legal and privacy teams with precedent writing, business development, and legal memoranda
-
Research and advise on issues relating to children's privacy, artificial intelligence, and emerging technologies
PRIVACY RISK ASSESSMENT
-
Develop and conduct privacy risk assessments that enable organizations to meet their compliance and cross-border requirements, including with PIPEDA, Ontario’s PHIPA, and Quebec’s Law 25
-
Conduct Privacy Impact Assessments and Transfer Impact Assessments
VIRTUAL PRIVACY OFFICER
-
Act as virtual privacy officer for organizations looking to fill a gap or backfill a vacancy
-
Advise on cross-border privacy issues, including data transfer agreements
PRIVACY TRAINING
-
Develop privacy training materials for organizations that are right-sized to their employee and business needs
-
Deliver training to employees and contractors on an as-needed or regular basis
