[{"data":1,"prerenderedAt":147},["ShallowReactive",2],{"legal:\u002Flegal\u002Fdsa-canada":3},{"id":4,"title":5,"body":6,"description":12,"extension":135,"meta":136,"navigation":138,"path":139,"seo":140,"stem":145,"__hash__":146},"content\u002Flegal\u002Fdsa-canada.md","LightLeapAI® DSA Terms — Canada Schedule",{"type":7,"value":8,"toc":130},"minimark",[9,13,16,19,22,82,85,88,91,94,97,102],[10,11,12],"p",{},"This Canada Schedule modifies the DSA Terms for a Customer located in Canada. Where it conflicts with the DSA Terms, this Schedule controls.",[10,14,15],{},"CA.1 Role of N2N. DSA Terms Sections 1.1 and 3.1 are replaced as follows. The Customer remains accountable for personal information under its control. N2N processes Shared Student Data as the Customer's service provider, solely to perform the Customer's mandate under the Contract Documents and under the Customer's direction, and will not use or disclose that information for any other purpose.",[10,17,18],{},"CA.2 Applicable Law. References to FERPA, the GLBA Safeguards Rule, Federal Tax Information, and U.S. state biometric privacy laws are replaced by references to the Customer's applicable federal and provincial privacy legislation (\"Canadian Privacy Law\"). Canadian Privacy Law includes PIPEDA where it applies; the Customer's provincial public-sector access and privacy legislation; and, in Québec, the Act respecting Access to documents held by public bodies and the Protection of personal information, or the Act respecting the protection of personal information in the private sector, as applicable.",[10,20,21],{},"CA.3 Data Categories. Appendix 1 of the DSA Terms is modified as follows:",[23,24,25,38],"table",{},[26,27,28],"thead",{},[29,30,31,35],"tr",{},[32,33,34],"th",{},"Element",[32,36,37],{},"Treatment",[39,40,41,50,58,66,74],"tbody",{},[29,42,43,47],{},[44,45,46],"td",{},"Social Insurance Number",[44,48,49],{},"Tier 2. Privacy Officer authorization required in all cases, limited to uses Canadian Privacy Law permits. Replaces the SSN and TIN entries.",[29,51,52,55],{},[44,53,54],{},"Government ID",[44,56,57],{},"Provincial driver's license or photo ID number, passport number, permanent resident card. Tier 2 as in Appendix 1.",[29,59,60,63],{},[44,61,62],{},"Immigration documents",[44,64,65],{},"Study permit and visa information for international applicants. Tier 2. Privacy Officer authorization required in all cases.",[29,67,68,71],{},[44,69,70],{},"Indigenous identity and racialized identity",[44,72,73],{},"Self-identification data. Tier 2. Privacy Officer authorization required in all cases. Replaces the race\u002Fethnicity row.",[29,75,76,79],{},[44,77,78],{},"Financial aid data",[44,80,81],{},"Provincial and federal student aid data (for example, OSAP or StudentAid BC). Tier 2 as in Appendix 1.",[10,83,84],{},"CA.4 Hosting and Access. Customer Data is hosted in the region identified in the Order Form. Access from outside Canada is governed by DSA Terms Section 3.5 and Public Sector Addendum Canada Schedule C.4.",[10,86,87],{},"CA.5 Foreign Legal Demands. If N2N receives a demand from a government or court outside Canada for Customer Data of a Canadian Customer, N2N will, to the extent the law permits: (a) notify the Customer promptly; (b) redirect the requester to the Customer where possible; (c) challenge the demand where N2N reasonably believes it is overbroad or conflicts with Canadian law; and (d) disclose only the minimum data the law requires.",[10,89,90],{},"CA.6 Security Incidents. DSA Terms Section 10 applies, with these additions: (a) N2N will provide the information the Customer needs to assess whether an incident creates a real risk of significant harm (or, in Québec, a risk of serious injury), and to report to the appropriate privacy commissioner and notify affected individuals; and (b) N2N will maintain records of Security Incidents involving the Customer's data and provide them on request, so the Customer can meet its record-keeping obligations.",[10,92,93],{},"CA.7 Access and Correction. N2N will help the Customer respond to requests by individuals to access or correct their personal information within the timelines set by Canadian Privacy Law. N2N will forward any request it receives directly to the Customer within five (5) business days.",[10,95,96],{},"CA.8 Québec. For a Customer subject to Québec law, the DSA is the written agreement required for communicating personal information to N2N. N2N confirms that it will: (a) apply the security measures in the Security Exhibit; (b) use the information only to perform the Customer's mandate; (c) not retain the information after the mandate ends, except as DSA Terms Section 13.4 permits; (d) notify the Customer of any Security Incident without delay, and within the period in DSA Terms Section 10.1; and (e) allow the Customer to verify compliance under DSA Terms Section 11.",[98,99,101],"h2",{"id":100},"revision-history","Revision history",[23,103,104,117],{},[26,105,106],{},[29,107,108,111,114],{},[32,109,110],{},"Version",[32,112,113],{},"Effective",[32,115,116],{},"Summary",[39,118,119],{},[29,120,121,124,127],{},[44,122,123],{},"2027.01",[44,125,126],{},"November 7, 2026",[44,128,129],{},"Initial posted version.",{"title":131,"searchDepth":132,"depth":132,"links":133},"",2,[134],{"id":100,"depth":132,"text":101},"md",{"version":123,"effective":126,"canonicalUrl":137},"\u002Flegal\u002Fdsa-canada\u002F",true,"\u002Flegal\u002Fdsa-canada",{"title":141,"description":142,"image":143,"imageAlt":144,"canonical":137},"DSA Terms — Canada Schedule | LightLeapAI®","Modifications to the DSA Terms for institutions located in Canada, including Canadian Privacy Law, hosting, foreign legal demands, and Québec.","\u002Fimages\u002Fog\u002Fog-legal.jpg","LightLeapAI® Legal — DSA Terms — Canada Schedule.","legal\u002Fdsa-canada","CVTHvf6ZsrpcMfPdfvEI11kungTmYiDbCnVv19zqKDc",1794079362944]