Ilona Bois-Drivet

 Lawyer
Key practice areas
Personal Information and Data Protection, Intellectual Property, Internal and Regulatory Investigations, Compliance and White Collar Defence
Québec Bar 2020
Montréal
+1 514 282 7803
ilona.bois-drivet@langlois.ca
Download Bois-Drivet, Ilona's card

Ilona Bois-Drivet dedicates her practice exclusively to technology, privacy and data governance law, and legal matters relating to artificial intelligence.

Ilona helps businesses and organizations of all sizes comply with Québec and Canadian and privacy laws. She assists clients in conducting privacy impact assessments (PIAs). In addition, Ilona provides guidance on how to manage databases and store, depersonalize and anonymize personal information. She advises clients on cybersecurity and helps them manage confidentiality incidents and data leaks. She assists in handling requests to exercise various individual rights, such as the right of access, rectification, portability, and withdrawal of consent.

Ilona has also developed expertise in artificial intelligence. She advises clients on all areas of personal information protection that relate to artificial intelligence (AI). This includes AI solution selection, development and risk assessment, AI data storage (including data processing by AI) and other issues related to accessing information, designing and implementing AI compliance plans and monitoring AI solution performance.

  • Young Bar of Montréal, Member, since 2021
  • Panelist: ODR and other public bodies, in the context of the ODR Forum Montreal, organized by the National Centre for Technology & Dispute Resolution (NCTDR), Montréal, October 11, 2023.

Short Graduate Program, Information Technology Law, Université de Montréal, 2019

LL.B., Université de Sherbrooke, 2018

Featured Articles

Publications
October 28th, 2024

Information security incident management: A new regulatory framework for financial institutions and credit assessment agents
On October 23, 2024, the Regulation respecting the management and reporting of information security incidents by certain financial institutions and by credit assessment agents was published in the Gazette officielle du Québec. The Regulation will come into force in six months and is intended to provide a framework for the management and reporting of information security incidents by certain provincial financial institutions. In the event of non-compliance, the Regulation also provides for administrative penalties.
Read more
Publications
October 25th, 2024

AI back in the regulatory spotlight: California passes new legislation
Over the course of September, more than 30 bills were introduced in California aimed at regulating the development and use of artificial intelligence, in particular by imposing specific requirements on generative AI systems. The state has enacted several AI-related bills, including SB 942 California AI Transparency Act and AB 2013 Generative Artificial Intelligence: Training Data Transparency.
Read more
Publications
October 16th, 2024

Sharing personal information among financial institutions: A right that may be expanded for improved anti-money laundering efforts
Pursuant to the Budget Implementation Act, 2024, No. 1, passed on June 20, 2024, reporting entities subject to the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, including banks and other institutions, are to be permitted to share an individual’s personal information with each other, without the individual’s knowledge or consent, for the purpose of detecting or deterring money laundering, terrorist activity financing or sanctions evasion.
Read more