Skip to main content

Evidence · 06

Programme & evidence

A policy PDF is not a programme. Evidence is what would explain processing and transfers on the facts.

First job List the evidence that would explain processing and transfers — not a policy slogan.

Start here

Key considerations

  1. What inventory exists?
  2. What transfer mechanism is documented?
  3. What would you show if asked tomorrow?

Decision map

Keep the question bounded.

  1. InventorySystems, categories, vendors.
  2. Mechanism fileSCC, assessment, certification or exemption note.
  3. Operating recordNotices, requests and incident history at a high level.

Curated resources

Open the asset that matches this job.

Helpful to prepare

Facts that make the next conversation clearer.

These items are orientation aids, not a legal requirement list.

  1. Where the live inventory sits
  2. Named owner of the transfer file
  3. Last review date, if known

Evidence file

Preserve the record before the forum is chosen.

This is a preparation prompt, not a finding that any item is admissible or required.

  1. Processing inventory
  2. Vendor and overseas-recipient map
  3. Transfer mechanism documents
  4. Notice and request handling notes
  5. Incident log, if any

Local context

Add the city when regulator practice changes.

CAC and industry-regulator practice can differ after the national transfer or cybersecurity question is identified.

Open city and province guides

Counsel hand-off

Need data-privacy counsel?

This hub organises PIPL, cybersecurity and export questions. It does not decide whether a transfer is lawful or whether notice is required on your facts.

Find data-privacy counsel

Request a free consultation

Directory and legal information only — not legal advice. Confirm current rules with qualified counsel.

Editorial policy · Last reviewed August 2026 · Data Privacy & Cybersecurity