Andy Nagy

Andy is a member of the Privacy and Data Management group in our Montréal office. He advises businesses on a wide range of privacy-related issues, including cross-border data transfers, privacy impact assessments, regulatory investigations, and the development of data governance programs. His expertise also extends to legal issues relating to emerging technologies such as artificial intelligence, big data analytics, blockchain, IoT, biometrics, and advertising technology (“adtech”).

Andy has authored and contributed to various publications on privacy, cybersecurity and technology law, including articles in the Canadian Privacy Law Review and contributions to books such as Managing Privacy in a Connected World (LexisNexis, 2020) and The Protection of Personal Information in the Private Sector in Quebec:

Looking Back and Thinking Forward (Yvon Blais, 2020). Previously, he was co-chair of Start Proud Montréal, a non-profit organization that supports the development of students and young professionals from the LGBTQ+ community.

Representative Work

Prior to joining Osler:

  • Advised companies in the financial services, e-commerce and social media platform sectors on privacy issues and risk management related to the use of emerging technologies such as artificial intelligence and biometrics.
  • Advised national and international clients facing complaints and regulatory investigations involving federal and provincial privacy regulators.
  • Helped companies in various sectors and industries implement privacy risk management tools and data governance strategies, including privacy impact assessments and consent management processes.

Speaking and Writing

Speaking Engagements

“September ’23 Countdown : How Will Quebec’s New Privacy Law Impact Marketers?”, IAPP Canada Privacy Symposium 2023, Toronto, May 26, 2023

Published Work

  • The Right to Erasure of Personal Information in Canada: Between Fact and Fiction, 18 C.P.L.R. no. 10, September 2021 (with Éloïse Gratton and Andy Nagy)
  • “Canada’s Consumer Privacy Protection Act: Impact for Businesses”, 18 C.P.L.R. no. 2, janvier 2021 (with Éloïse Gratton, Elisa Henry, Daniel Michaluk, Ira Parghi, François Joli-Cœur, Max Jarvie and Katherine McNeill)
  • “OPC [Office of the Privacy Commissioner of Canada] Lays Groundwork for a Canadian Right to Be Forgotten in Recent RateMDs Privacy Decision”, 18 C.P.L.R. no. 1, décembre 2020 (with Éloïse Gratton)
  • “Anonymous Video Analytics’ Future Uncertain After Canadian Privacy Regulators’ Investigation”, 29 Canadian Corporate Counsel 92-98, novembre 2020 (with Éloïse Gratton)
  • “Proposed Amendments to Québec Privacy Law: Impact for Businesses”, 17 C.P.L.R. no 9, août 2020 (with Éloïse Gratton, Elisa Henry, François Joli-Cœur and Max Jarvie)
  • “When is it legal to repurpose publicly available information for commercial purposes?” (2019), 17 C.P.L.R. (with Éloïse Gratton)



  • McGill University, B.C.L./LL.B.
  • Certified information privacy professional (CIPP/C et CIPP/EU), International Association of Privacy Professionals


  • English
  • French

Professional Affiliations

  • International Association of Privacy Professionals