Compliance frameworks and training for Canada
Lavawall® maps 21 compliance frameworks specific to Canada and offers 101 staff training courses written for it. Open a framework for its requirements and assessment tiers; the courses are listed below.
This is general information to help you find the right material, not legal advice. Which rules apply to you depends on your organization.
Provinces and territories we cover
Alberta
British Columbia
Manitoba
Newfoundland and Labrador
Nova Scotia
Ontario
Quebec
SaskatchewanCompliance frameworks
Proposed laws, not in force
Use these to prepare. They are not obligations today.
- Consumer Privacy Protection Act (CPPA) - Draft, not in force
- Protecting Privacy and Consumer Data Act (PPCDA) - Draft, Bill C-36, not in force
Staff training for Canada
Courses your team can take in the browser, with a short quiz and a completion record. See all Lavawall training.
- AI for Canadian Business Leaders — A Plain-Language Guide (about 40 minutes)
Non-technical AI primer for Canadian business leaders whose IT is managed by an MSP. Plain-language tour of the major AI tools, why free vs. paid matters for data privacy, AI notetakers including invisible side-channe... - AI in Canadian Healthcare: Safe, Compliant & Practical (about 45 minutes)
For Canadian healthcare workers. Covers PIPEDA and provincial health privacy laws, PHI protection, malicious AI add-ons, agentic AI risks, patient-facing AI chatbot and IVR security, and safe clinical applications. - Alberta Employment Standards for Small Business Owners (about 20 minutes)
Required compliance and HR training. Course code: CA-HR-AB. Contact your training administrator for questions. - BC Employment Standards for Small Business Owners (about 20 minutes)
Required compliance and HR training. Course code: CA-HR-BC. Contact your training administrator for questions. - C-SOX — Canadian Securities NI 52-109 (about 25 minutes)
For Canadian publicly traded companies. Covers NI 52-109 CEO/CFO certification requirements and the IT general controls expected to support them. - CIRO/IIROC Cybersecurity Requirements (about 33 minutes)
Required compliance and HR training. Course code: GRC-IIROC. Contact your training administrator for questions. - California Employment Law for Small Business Owners (about 20 minutes)
Required compliance and HR training. Course code: US-HR-CA. Contact your training administrator for questions. - Canadian Centre for Cyber Security Controls (about 33 minutes)
Required compliance and HR training. Course code: GRC-CCCS. Contact your training administrator for questions. - Canadian Cyber Essentials (about 33 minutes)
Canadian Centre for Cyber Security guidance on foundational cyber hygiene for Canadian businesses. Covers the six core controls: incident response plan, patch operating systems and applications, enable automatic updat... - Canadian Cybersecurity Act Compliance: Bill C-26 / Bill C-8 (about 35 minutes)
Required compliance and HR training. Course code: CA-CYBER-ACT-C26. Contact your training administrator for questions. - Canadian Federal Employment Law: Canada Labour Code Essentials (about 25 minutes)
Required compliance and HR training. Course code: CA-HR-FED. Contact your training administrator for questions. - Canadian Health Privacy: PIPEDA and Federal Framework (about 25 minutes)
Required compliance and HR training. Course code: CA-HEALTH-PRIVACY-GEN. Contact your training administrator for questions. - Canadian Oil & Gas Cybersecurity: Regulatory Requirements (about 30 minutes)
Required compliance and HR training. Course code: CA-OIL-GAS-CYBER. Contact your training administrator for questions. - Canadian Program for Cyber Security Certification (CPCSC): Level 1 for Staff (about 28 minutes)
For employees and managers at Canadian defence suppliers. Explains what Specified Information is, how CPCSC Level 1 works (an annual self-assessment of 13 controls from ITSP.10.171, attested in CanadaBuys at contract ... - Common Criteria certification in Canada (about 15 minutes)
How the Canadian Common Criteria Program evaluates and certifies IT products: Protection Profiles, accredited labs, the four evaluation gates, cryptography, vulnerabilities, and keeping a certificate valid. For produc... - EU GDPR for Canadian Businesses (about 38 minutes)
For Canadian organisations with EU customers, website visitors, or employees. Covers GDPR extraterritoriality, lawful bases, data subject rights, Standard Contractual Clauses for data transfers, and breach notificatio... - FINTRAC and PCMLTFA — Anti-Money Laundering (Canada) (about 30 minutes)
For Canadian financial services, money services businesses, and real estate. Covers PCMLTFA obligations: KYC, suspicious transaction reporting, large cash transaction reporting, and record-keeping. - Government of Canada cloud security: CCCS profiles and PBHVA (about 28 minutes)
How the Canadian Centre for Cyber Security's cloud control profiles work (ITSP.50.103), how the Cyber Centre assesses cloud providers for the Government of Canada at the Cloud Medium (PBMM) and PBHVA levels, and what ... - LLM and AI Strategy for Canadian MSPs (about 77 minutes)
Technical AI strategy course for Canadian MSP technicians and leaders. Covers the 2026 provider landscape, Microsoft 365 Copilot SKUs and Copilot Credits transition, AI notetakers across four categories, Canadian data... - Manitoba Employment Standards for Small Business Owners (about 18 minutes)
Required compliance and HR training. Course code: CA-HR-MB. Contact your training administrator for questions. - New Brunswick Employment Standards for Small Business Owners (about 15 minutes)
Required compliance and HR training. Course code: CA-HR-NB. Contact your training administrator for questions. - Newfoundland & Labrador Employment Standards for Small Business Owners (about 15 minutes)
Required compliance and HR training. Course code: CA-HR-NL. Contact your training administrator for questions. - Northwest Territories Employment Standards for Employers (about 15 minutes)
Required compliance and HR training. Course code: CA-HR-NT. Contact your training administrator for questions. - Nova Scotia Employment Standards for Small Business Owners (about 18 minutes)
Required compliance and HR training. Course code: CA-HR-NS. Contact your training administrator for questions. - Nunavut Employment Standards for Employers (about 15 minutes)
Required compliance and HR training. Course code: CA-HR-NU. Contact your training administrator for questions. - Online Safety for Elementary Students (Canada) (about 25 minutes)
Online safety training written for the student themselves, age-appropriate to this grade band. Covers stranger contact, predator-grooming patterns, sextortion and the response that actually works, AI use in school (ac... - Online Safety for High Schoolers (Canada) (about 40 minutes)
Online safety training written for the student themselves, age-appropriate to this grade band. Covers stranger contact, predator-grooming patterns, sextortion and the response that actually works, AI use in school (ac... - Online Safety for Middle Schoolers (Canada) (about 35 minutes)
Online safety training written for the student themselves, age-appropriate to this grade band. Covers stranger contact, predator-grooming patterns, sextortion and the response that actually works, AI use in school (ac... - Online Safety for Parents of Early Childhood (Ages 3-6) (Canada) (about 35 minutes)
Security awareness training for the parent of a young child (ages 3-6). Covers online predators, scams, app and platform risks specific to this age, AI in school, family vs. work device hygiene, the family safe-phrase... - Online Safety for Parents of Elementary Students (Ages 7-10) (Canada) (about 40 minutes)
Security awareness training for the parent of an elementary-school-age child (ages 7-10). Covers online predators, scams, app and platform risks specific to this age, AI in school, family vs. work device hygiene, the ... - Online Safety for Parents of High Schoolers (Ages 14-18) (Canada) (about 45 minutes)
Security awareness training for the parent of a high schooler (ages 14-18). Covers online predators, scams, app and platform risks specific to this age, AI in school, family vs. work device hygiene, the family safe-ph... - Online Safety for Parents of Middle Schoolers (Ages 11-13) (Canada) (about 45 minutes)
Security awareness training for the parent of a middle schooler (ages 11-13). Covers online predators, scams, app and platform risks specific to this age, AI in school, family vs. work device hygiene, the family safe-... - Online Safety for Post-Secondary Students (Canada) (about 35 minutes)
Online safety training written for the student themselves, age-appropriate to this grade band. Covers stranger contact, predator-grooming patterns, sextortion and the response that actually works, AI use in school (ac... - Ontario Employment Standards for Small Business Owners (about 20 minutes)
Required compliance and HR training. Course code: CA-HR-ON. Contact your training administrator for questions. - PIPEDA and Quebec Law 25 Privacy Compliance (about 33 minutes)
Required compliance and HR training. Course code: GRC-PIPEDA-LAW25. Contact your training administrator for questions. - Prince Edward Island Employment Standards for Small Business Owners (about 15 minutes)
Required compliance and HR training. Course code: CA-HR-PE. Contact your training administrator for questions. - Quebec Employment Standards for Small Business Owners (about 20 minutes)
Required compliance and HR training. Course code: CA-HR-QC. Contact your training administrator for questions. - Saskatchewan Employment Standards for Small Business Owners (about 18 minutes)
Required compliance and HR training. Course code: CA-HR-SK. Contact your training administrator for questions. - Security Awareness for Accounting and Tax — Canada (about 26 minutes)
Practical security training for Accounting and Tax professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Accounting and Tax — Canada (CaseWare) (about 26 minutes)
Practical security training for Accounting and Tax professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Agriculture — Canada (about 23 minutes)
Practical security training for Agriculture professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Architecture and Engineering — Canada (about 26 minutes)
Practical security training for Architecture and Engineering professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Automotive Dealerships — Canada (about 26 minutes)
Practical security training for Automotive Dealerships professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Canadian Health Device Manufacturers (about 55 minutes)
Comprehensive security awareness training for staff at a Canadian health device manufacturer. Covers sector-specific threats, applicable regulatory regime, scam patterns aimed at your role, and breach-reporting obliga... - Security Awareness for Canadian Import-Export Operators (about 50 minutes)
Comprehensive security awareness training for staff at a Canadian import-export business. Covers sector-specific threats, applicable regulatory regime, scam patterns aimed at your role, and breach-reporting obligation... - Security Awareness for Canadian Managed Service Providers (about 55 minutes)
Comprehensive security awareness training for staff at a Canadian MSP. Covers sector-specific threats, applicable regulatory regime, the scam patterns aimed at your role, and your breach-reporting obligations. The cor... - Security Awareness for Canadian Manufacturing (about 50 minutes)
Comprehensive security awareness training for staff at a Canadian manufacturer. Covers sector-specific threats, applicable regulatory regime, scam patterns aimed at your role, and breach-reporting obligations. The cor... - Security Awareness for Canadian Non-Profits Serving Vulnerable Populations (about 65 minutes)
Comprehensive security awareness training for staff and volunteers at Canadian non-profits whose work involves children, abuse survivors, mental-health clients, or other vulnerable people. Covers the harm test for AI ... - Security Awareness for Canadian Non-Profits in Healthcare (about 55 minutes)
Comprehensive security awareness training for staff at a Canadian healthcare non-profit. Covers sector-specific threats, applicable regulatory regime, the scam patterns aimed at your role, and your breach-reporting ob... - Security Awareness for Canadian Oil & Gas (about 55 minutes)
Comprehensive security awareness training for staff at a Canadian oil & gas operator. Covers sector-specific threats, applicable regulatory regime, the scam patterns aimed at your role, and your breach-reporting oblig... - Security Awareness for Canadian Restaurants and Food Services (about 45 minutes)
Comprehensive security awareness training for staff at a Canadian restaurant or food-service operator. Covers sector-specific threats, applicable regulatory regime, scam patterns aimed at your role, and breach-reporti... - Security Awareness for Canadian Retailers (about 50 minutes)
Comprehensive security awareness training for staff at a Canadian retailer. Covers sector-specific threats, applicable regulatory regime, scam patterns aimed at your role, and breach-reporting obligations. The core se... - Security Awareness for Colleges and Universities — Canada (about 26 minutes)
Practical security training for Colleges and Universities professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Construction and Trades — Canada (about 23 minutes)
Practical security training for Construction and Trades professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Dental and Healthcare — Canada (about 26 minutes)
Practical security training for Dental and Healthcare professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Energy and Utilities — Canada (about 23 minutes)
Practical security training for Energy and Utilities professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Environmental Services — Canada (about 26 minutes)
Practical security training for Environmental Services professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Financial Technology — Canada (about 26 minutes)
Practical security training for Financial Technology professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Hospitality and Hotels — Canada (about 29 minutes)
Practical security training for Hospitality and Hotels professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Insurance — Canada (about 26 minutes)
Practical security training for Insurance professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Legal and Law Firms — Canada (about 26 minutes)
Practical security training for Legal and Law Firms professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Marketing and Media — Canada (about 26 minutes)
Practical security training for Marketing and Media professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Municipal and Local Government — Canada (about 23 minutes)
Practical security training for Municipal and Local Government professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Pharmacy and Life Sciences — Canada (about 26 minutes)
Practical security training for Pharmacy and Life Sciences professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Property Management — Canada (about 26 minutes)
Practical security training for Property Management professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Real Estate — Canada (about 26 minutes)
Practical security training for Real Estate professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Schools and Education — Canada (about 23 minutes)
Practical security training for Schools and Education professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Security and Investigations — Canada (about 26 minutes)
Practical security training for Security and Investigations professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Social Services — Canada (about 26 minutes)
Practical security training for Social Services professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Sports, Fitness and Recreation — Canada (about 26 minutes)
Practical security training for Sports, Fitness and Recreation professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Staffing and Recruitment — Canada (about 26 minutes)
Practical security training for Staffing and Recruitment professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Telecommunications — Canada (about 23 minutes)
Practical security training for Telecommunications professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security Awareness for Transport and Logistics — Canada (about 26 minutes)
Practical security training for Transport and Logistics professionals in Canada. Covers how to spot fake emails, payment fraud, account security, device safety, and privacy obligations. - Security While Travelling for Work — Canada (about 20 minutes)
Security training for business travellers in Canada. Device security, border risks, hotel networks, and incident response while away. - Using AI Responsibly in Accounting and Tax — Canada (about 40 minutes)
For Accounting and Tax professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Agriculture — Canada (about 40 minutes)
For Agriculture professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Architecture and Engineering — Canada (about 40 minutes)
For Architecture and Engineering professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Automotive Dealerships — Canada (about 40 minutes)
For Automotive Dealerships professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Colleges and Universities — Canada (about 40 minutes)
For Colleges and Universities professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Construction and Trades — Canada (about 40 minutes)
For Construction and Trades professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Dental and Healthcare — Canada (about 40 minutes)
For Dental and Healthcare professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Energy and Utilities — Canada (about 40 minutes)
For Energy and Utilities professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Environmental Services — Canada (about 40 minutes)
For Environmental Services professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Financial Technology — Canada (about 40 minutes)
For Financial Technology professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Hospitality and Hotels — Canada (about 40 minutes)
For Hospitality and Hotels professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Insurance — Canada (about 40 minutes)
For Insurance professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Legal and Law Firms — Canada (about 40 minutes)
For Legal and Law Firms professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Marketing and Media — Canada (about 40 minutes)
For Marketing and Media professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Municipal and Local Government — Canada (about 40 minutes)
For Municipal and Local Government professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Pharmacy and Life Sciences — Canada (about 40 minutes)
For Pharmacy and Life Sciences professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Property Management — Canada (about 40 minutes)
For Property Management professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Real Estate — Canada (about 40 minutes)
For Real Estate professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Schools and Education — Canada (about 40 minutes)
For Schools and Education professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Security and Investigations — Canada (about 40 minutes)
For Security and Investigations professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Social Services — Canada (about 40 minutes)
For Social Services professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Sports, Fitness and Recreation — Canada (about 40 minutes)
For Sports, Fitness and Recreation professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Staffing and Recruitment — Canada (about 40 minutes)
For Staffing and Recruitment professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Telecommunications — Canada (about 40 minutes)
For Telecommunications professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Using AI Responsibly in Transport and Logistics — Canada (about 40 minutes)
For Transport and Logistics professionals in Canada. Covers AI risks specific to your work, what information must never enter AI tools, and your data privacy obligations. - Working From Home Securely — Canada (about 25 minutes)
Security and privacy training for remote workers in Canada. - Yukon Employment Standards for Employers (about 15 minutes)
Required compliance and HR training. Course code: CA-HR-YT. Contact your training administrator for questions.
Frameworks that apply anywhere, such as ISO 27001, SOC 2, and NIST, are on the full framework list.
Common questions
Which compliance frameworks does Lavawall cover for Canada?
Lavawall maps 21 frameworks specific to Canada, including CPCSC certification, CCCS cyber security guidance, FINTRAC / PCMLTFA, C-SOX (NI 52-109), CPA Canada cybersecurity, Canada AI Governance Readiness. Each has assessment tiers, questionnaires, and policy templates, and its requirements map to a shared control set so evidence collected once counts everywhere it applies.
Does Lavawall offer security and privacy training for Canada?
Yes. Lavawall Training has 101 courses written for Canada, each with a short quiz and a completion record you can show an auditor.
Is this legal advice?
No. The frameworks and courses are general information built from the official law and regulator text, to help you find and organize the right material. Ask a lawyer how the rules apply to your organization.