By David Young ( October 6, 2026, 2:27 PM EDT) -- The federal Office of the Privacy Commissioner has issued a draft guidance document addressing best practices for organizations contracting with third-party service providers. By its title, “Guidance on Assessing Third-Party Service Providers,” the guidance suggests that it should be used by organizations in assessing the qualification of a potential service provider — the due diligence requirement. However, in the broader context, it may be understood as addressing not only the due diligence aspects but also the contracting requirements for organizations’ service provider relationships....