Kristin Ali

Kristin Ali, CIPP/C

Counsel, Privacy & Data Management

Key Contact: Privacy and Data Management

Contact Information

tel: 416.862.5920



Bar Admission

Massachusetts, 2009

Ontario, 2008


  • Certified Information Privacy Professional/Canada (CIPP/C)
  • McGill University, LL.B./B.C.L.
  • Victoria College, University of Toronto, B.A. (Hon.)



Kristin advises clients on a broad range of privacy and cybersecurity matters. She has extensive experience working with small, medium and large companies that have suffered data breaches and cyber attacks. This includes providing strategic advice on data breach notification obligations, responding to multi-jurisdictional regulatory investigations, and managing inquiries from Boards of Directors, consumers, employees, and media. Kristin regularly advises emerging and established companies on privacy considerations in M&A transactions, and helps companies design and build privacy and data security governance programs.

Prior to joining Osler, Kristin practised for many years in Toronto and Boston as a litigator, focusing on privacy and technology-related disputes and e-discovery issues. She has represented public and private organizations in litigation, arbitration, and government investigations relating to data security breaches, software failure, and securities fraud.

Kristin speaks regularly at conferences across Canada and the U.S. on cross-border and cybersecurity issues. She is the Co-Founder and Co-Chair of Osler’s South Asian Network, and the former Co-Chair of the Women in Technology Committee of the Canadian Technology Law Association. For many years, Kristin was a member of the adjunct faculty of Osgoode Hall Law School teaching an upper-year seminar on contractual remedies. Kristin began her legal career in Toronto, clerking for Justices Doherty, MacPherson, Juriansz and LaForme of the Court of Appeal for Ontario.

  • Best Lawyers in Canada: Recognized in Privacy and Data Security Law

  • Ontario Bar Association

    Speaker, Corporate Law meets Data Protection Law, March 3, 2021

  • Canadian Federal Privacy Law Reform: Regulatory, Litigation and Financial Risks under the Proposed New Private Sector Privacy Statute - The Consumer Protection Privacy Act

    Speaker, February 10, 2021

  • Osler South Asian Network - Best Practices for Small Businesses Operating amid a Global Pandemic

    Moderator, September 17, 2020

  • Canadian Technology Law Association

    Moderator, The Ripples you Create: A workshop on amplifying women’s voices in the media, July 7, 2020

  • FACL Ontario's 13th Annual Conference and Gala

    Speaker, Privacy Law: A Comprehensive Update, Toronto, February 8, 2020

  • Canadian Technology Law Association Workshop

    Conference Chair, Disrupting Bias - Overcoming our Discomfort with Differences, November 21, 2019

  • 2019 CAN-TECH Annual Conference

    Moderator, Leaders in Tech: Building Dynamic Inclusive Cultures, Toronto, October 28, 2019

  • CAN-Tech Technology Law Spring Forum

    Moderator, Data Breaches: "Lessons Learned", June 17, 2019

  • York Science Forum

    Speaker, Cybersecurity in the Age of Espionage, Toronto, April 3, 2019

  • The Nineteenth Annual Canadian IT Law Association Conference (IT.CAN)

    Moderator, The Breach Lifecycle: Managing the Risks of Cybersecurity, Toronto, October 27, 2015

  • Aon Risk Solutions Series: Cyber Liability: Privacy Breach and Network Security Risk

    Speaker, Data Breach Class Actions, Toronto, October 15, 2014

  • Canada Financial Institutions Cybersecurity Summit

    Speaker, Data Breach Notification Obligations: Canada and U.S. Highlights, Toronto, May 28, 2014

  • Canada Financial Institutions Cybersecurity Summit

    Speaker, Aftermath of a Data Breach: Claims, Liability and Cost, Toronto, May 28, 2014

  • Association of Corporate Counsel: Annual In-House Symposium

    Speaker, Litigating in Canada: What American Corporate Counsel Need to Know, Dallas - Fort Worth, Texas, May 9, 2014

  • International Association of Privacy Professionals (IAPP)
  • The Advocates’ Society
  • Canadian Bar Association
  • Ontario Bar Association
  • American Bar Association
  • Boston Bar Association
  • Canadian American Bar Association
  • Canadian Technology Law Association (CAN-TECH)


  • Co-author, Canada's securities regulators report on cybersecurity disclosure review
    Data Protection Leader, Vol. 14, Issue 4, pp. 12-13, Cecile Park Media, April 2017.
  • Co-author, Cybersecurity Risk Management: Getting the Board on Board
    Association of Corporate Counsel, ACC Ontario Newsletter, January 2016.
  • Co-author, Cybersecurity Risks in Canada
    Bloomberg BNA World Data Protection Report, Volume 15, Number 11, November 2015.

In the Media

  • Quoted, Cybersecurity Lawyers Defend Against Attacks
    Law Times, July 18, 2016.