Éloïse Gratton

Éloïse is recognized nationally as a leading privacy law practitioner in Canada, and co-chair Osler’s national privacy and data management practice. She advises corporations across multiple sectors on a wide array of privacy compliance, crisis and risk management, cyber incidents, ethics, data governance matters and the evolving area of artificial intelligence. Éloïse also represents clients on privacy regulatory investigations.

Éloïse also offers strategic support to Canadian and international clients. Éloïse has authored several books in the privacy law area used in law courses and cited by academic journals and landmark privacy decisions of the Supreme Court of Canada. Éloïse serves as a member of the Canadian Chamber of Commerce Innovations & IP Committee and has testified before parliamentary committees on information, privacy, and technology. She is a member of the Institute of Corporate Directors and is a board member of Canada Health Infoway.

Éloïse was recently honoured by Canadian Lawyer magazine as a forward thinker and selected twice as one of the country’s 25 most influential lawyers, as well as selected as one of Canada’s Top 100 Most Influential Women by the Women’s Executive Network (WXN) in the “CIBC Trailblazers & Trendsetters” category.

University of Montréal, LL.M

University of Montréal, LL.B.

Université Paris 2 Panthéon-Assas and University of Montréal, LL.D (Honours)

Institute of Corporate Directors, ICD.D., Corporate Governance

Publications consulted in Canada and abroad, used in law courses and cited in academic journals as well as in landmark privacy decisions by the Supreme Court of Canada. She authored Internet and Wireless Privacy: A Legal Guide to Global Business Practices, one of the first technology and privacy book in Canada (CCH, 2003). Recent works include Managing Privacy in a Connected World (LexisNexis 2020), Privacy in the Workplace, 4th edition (LexisNexis, 2017), Practical Guide to e-Commerce and Internet Law (LexisNexis 2015) and Understanding Personal Information: Managing Privacy Risks (LexisNexis, 2013).