Canada’s privacy enforcers are increasingly transparent about the patterns they see across investigations, offering a roadmap to companies for avoiding scrutiny. Their reflections on how they investigate, prioritize and resolve cases offer a window into the evolving expectations that are shaping day-to-day governance. At the recent IAPP Canada Symposium 2026, Canada’s privacy commissioner and deputy privacy commissioner, along with regulators from Ontario and British Columbia discussed regulatory collaboration, children’s privacy and age assurance, enforcement and investigations, privacy statistics and key legislative developments. This article distills their insights, priorities and strategies. See “How to Comply With Canada’s New Privacy Breach Reporting and Record-Keeping Rules” (Oct. 31, 2018).