Aya Barbach is a partner in the Data Protection, Privacy and Cybersecurity Group. Her practice focuses on privacy, cybersecurity, access to information and online advertising and marketing.

Aya advises and supports both private sector companies and public organizations in all areas of information technology and data protection. She has experience in all legal and governance issues related to data protection and privacy, including the management of privacy incidents (including breach risk assessment and potential notification obligations, as well as internal and external communication strategy), the implementation of contracts, policies and procedures (such as personal information transfer contracts, privacy policy, consent form and any other document related to data protection issues).

She also assists organizations with audits and investigations, notably before the Commission d'accès à l'information.

Aya also advises and supports employers on all digital and data protection issues related to their employee relations (such as employee privacy policies, employee consent forms, video surveillance policies, regulator investigations following employee complaints). She represents employers in grievances and appeals concerning privacy and personal information protection issues.

Aya also acts on behalf of organizations in access to information requests and inquiries before the Commission d'accès à l'information du Québec.

She pleads before judicial and administrative tribunals, including the Commission d'accès à l'information du Québec.

For several years now, Aya has been a frequent contributor to discussions on data protection, notably by making submissions to Canadian regulators, including the Office of the Privacy Commissioner of Canada and the Commission d'accès à l'information du Québec, and by giving numerous training sessions and conferences to the public. She is also the author of numerous publications in her field.