Skip to main content

Connecting the dots between AI, privacy and cybersecurity law

July 27, 2026

OsgoodePD

4 Min Read

Share With Your Network

Privacy and cybersecurity law is not for the faint of heart, if you ask Matt Saunders, Montreal-based cybersecurity lawyer, breach coach, AI risk manager and geopolitical advisor.

He explains that the complex and constantly evolving legislative environment that he works in has always required adaptability for those who want to stay ahead of the curve. But recent technological advances have only increased the need for privacy and cybersecurity law professionals to stay current.

“The stakes are rising and now with artificial intelligence, threat actors are using more nefarious ways to break into systems. That in turn is raising unique cyber and privacy risks,” says Saunders, co-chair of OsgoodePD’s upcoming 5th Annual Update: Privacy and Cybersecurity Law and Practice.

In fact, the pace of change in the field means that attendees at the day-long program – which takes place live in-person and online on Dec. 2, with a replay scheduled several weeks later on Jan. 27 – may not recognize much of the content, even if they took part in earlier editions.

“We don’t want to just rehash things that have been covered at previous sessions,” says Saunders, who co-chairs the program with Sylvia Klasovec, AI governance executive and founder of Trusteva Consulting Inc.

“What we’re really keen on doing is creating panels and discussions that will help people connect the dots between privacy, cybersecurity and AI, because there is so much overlap in the legal and practical developments that are happening,” Saunders adds. “Lawyers within those three spaces, particularly those who think they can operate in any one of them in isolation, will benefit from attending.”

As well as private-practice or in-house lawyers with an interest in AI, privacy and cybersecurity law, he says professionals in the fields of IT, government, policing and breach coaching should consider enrolling.

“There’s a whole host of people who are going to have to come to grips with how AI tools are being deployed and learn how to speak fluently about these risks, because they’re all going to be called around the table when incidents take place,” Saunders says.

Saunders came relatively late to the law, having first established himself in the field of risk management consulting in Vancouver, where he managed pandemic response initiatives and public health security projects for clients across the U.S. and Canada.

After graduating from law school, Saunders initially practised complex commercial litigation at a large global law firm, before moving to the Maritimes, where insurance defence work took up a greater proportion of his litigation practice and gave him his first real exposure to cyber defence policies – as well as the insurance companies and businesses that are parties to them.

That brought him full circle from risk management consulting to practising in AI, data privacy and cybersecurity law, where he developed deep experience anticipating, preventing and responding to cyber incidents – from working with clients to test their readiness for potential cyber attacks to acting as breach coach for regional, national and international businesses in the midst of a real one, guiding them through the legal and regulatory consequences of the crisis.

The privacy and cybersecurity law and practice update will not be Saunders’ first encounter with OsgoodePD, since he is a former graduate of the renowned Intensive Trial Advocacy Workshop program – in addition to the Written Advocacy program, where one of the instructors was uniquely familiar.

“My dad was a judge on the Nova Scotia Court of Appeal and he was on the faculty, so we did that together as father and son; student and teacher,” Saunders says.

“It was a really formative experience for me, so I jumped at the chance to give back to Osgoode,” he adds, noting that the practical focus of the ITAW is reflected in the agenda of the privacy and cybersecurity law program.

Legal practitioners and industry professionals who want to dive deeper into the subject also have the options of enhancing their expertise further via Osgoode’s part-time Professional LLM in Privacy and Cybersecurity Law or The Osgoode Certificate in Privacy and Cybersecurity Law, two programs geared to working professionals.

Want to learn more about the 4th Annual Update in Privacy and Cybersecurity Law and Practice?