Legal Documentation

Privacy Policy

Last Updated: 2024. This Privacy Policy governs how GovernLex collects, uses, maintains, and discloses information collected from users of our AI Governance and Law platforms.

Jurisdiction: Winnipeg, Manitoba, Canada (PIPEDA & PIPA compliant)

Disclaimer: This document is a standard framework for information purposes and does not constitute formal legal advice. As AI regulations evolve rapidly, GovernLex recommends consulting with our legal department for specific compliance inquiries regarding the Personal Information Protection and Electronic Documents Act (PIPEDA).

06. Data Retention and Security

GovernLex retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. In the context of AI governance, this may involve maintaining records of risk assessments for the duration of the AI system's lifecycle.

We implement rigorous technical and organizational measures, including AES-256 encryption and multi-factor authentication, to protect your data against unauthorized access, alteration, or destruction.

07. International Data Transfers

As a global provider of AI regulation frameworks, GovernLex may transfer data outside of Manitoba or Canada. When transferring data to jurisdictions not deemed "adequate" by the Office of the Privacy Commissioner of Canada, we utilize Standard Contractual Clauses (SCCs) and Supplementary Measures to ensure a level of protection equivalent to Canadian standards.

08. Your Rights as a Data Subject

Under PIPEDA and applicable international laws (like GDPR), you hold the following rights:

Access & Portability

Request a copy of your personal data and transfer it to another service provider in a structured format.

Rectification & Erasure

Correct inaccurate data or request the permanent deletion of your information ("Right to be Forgotten").

Restriction of Processing

Limit how we use your data if you contest its accuracy or the legality of the processing.

Withdrawal of Consent

Withdraw your consent at any time for processing activities based on your prior agreement.

09. Automated Decision-Making

In providing AI compliance analysis, GovernLex may use automated tools. However, we do not make decisions that produce legal effects or similarly significantly affect individuals based solely on automated processing without human oversight, in accordance with the proposed Artificial Intelligence and Data Act (AIDA).

10. Contact and Complaints

To exercise your rights or if you have questions regarding this policy, please contact our Privacy Officer. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada.

Return to Home