Leaders in privacy, compliance & information governance solutions

Welcome. Log in or create an account for AccessPrivacy.com

Kristin Ali, CIPP/C


(416) 862-5920


Kristin is a member of the Privacy & Data Management group and advises clients on a broad range of privacy, cybersecurity, and information management matters. She has extensive experience working with corporate clients that have suffered data breaches or have been accused of privacy violations.

Prior to joining Osler, Kristin practised for many years in Toronto and Boston as a litigator, focusing on technology-related disputes and e-discovery issues. She has represented public and private organizations in litigation, arbitration, and government investigations relating to data security breaches, software failure, securities fraud, and pharmaceutical compliance.

As a member of the adjunct faculty of Osgoode Hall Law School, Kristin teaches an upper-year seminar on contract remedies. She also speaks regularly at conferences across Canada and the U.S. on cross-border and cybersecurity issues.

Kristin began her legal career in Toronto, clerking for Justices Doherty, MacPherson, Juriansz and LaForme of the Court of Appeal for Ontario.


  • International Association of Privacy Professionals (IAPP)
  • The Advocates’ Society
  • Canadian Bar Association
  • Ontario Bar Association
  • American Bar Association
  • Boston Bar Association
  • Canadian American Bar Association



  • Co-author, Canada's securities regulators report on cybersecurity disclosure review Data Protection Leader, Vol. 14, Issue 4, pp. 12-13, Cecile Park Media, April 2017.
  • Co-author, Cybersecurity Risk Management: Getting the Board on Board
    Association of Corporate Counsel, ACC Ontario Newsletter, January 2016.
  • Co-author, Cybersecurity Risks in Canada Bloomberg BNA World Data Protection Report, Volume 15, Number 11, November 2015.

Previous Speaking Engagements

  • Speaker, Cybersecurity in the Age of Espionage
    York Science Forum, Toronto, April 3, 2019. 
  • Moderator,The Breach Lifecycle: Managing the Risks of Cybersecurity
    The Nineteenth Annual Canadian IT Law Association Conference (IT.CAN), Toronto, Ontario, October 27, 2015.
  • Speaker, Data Breach Class Actions on Risk Solutions Series: Cyber Liability: Privacy Breach and Network Security Risk, Toronto, Ontario, October 15, 2014.
  • Speaker, Data Breach Notification Obligations: Canada and U.S. Highlights
    Canada Financial Institutions Cybersecurity Summit, Toronto, Ontario, May 28, 2014.
  • Co-speaker, Aftermath of a Data Breach: Claims, Liability and Cost
    Canada Financial Institutions Cybersecurity Summit, Toronto, Ontario, May 28, 2014.
  • Co-speaker, Litigating in Canada: What American Corporate Counsel Need to Know Association of Corporate Counsel: Annual In-House Symposium Dallas - Fort Worth, Texas, May 9, 2014.


  • Certified Information Privacy Professional/Canada (CIPP/C)
  • McGill University, LL.B./B.C.L.
  • Victoria College, University of Toronto, B.A. (Hon.)

In the Media

  • Quoted, Cybersecurity Lawyers Defend Against Attacks
    Law Times, July 18, 2016.