Jasmine Kaur Samra

Jasmine Samra is counsel in Gowling WLG's Toronto office and a member of the firm's Cyber Security and Data Protection Group and Technology Group. Jasmine advises clients on a wide range of privacy, cyber security, AI and data governance issues across industries such as technology, financial services and insurance.

Jasmine supports organizations in navigating complex privacy requirements, including compliance with emerging technologies like artificial intelligence, big data and the Internet of Things. She addresses intricate privacy challenges, including those related to AI tools and biometrics, by providing clients with strategic, forward-thinking guidance to assist in compliance with evolving legal standards while mitigating risks. She helps clients develop and implement privacy compliance programs and privacy frameworks tailored to their unique operational needs. Her experience extends to advising on corporate transactions, outsourcing arrangements, data processing agreements and cross-border data flows.

With broad experience handling requests under Canada's Access to Information Act and provincial freedom of information legislation, Jasmine assists clients in safeguarding confidential third-party business information. She also provides practical and strategic advice on managing data breaches and other privacy-related incidents, serving as a trusted advisor.

Jasmine's expertise also encompasses Canada's anti-spam law (CASL) and the Canadian Radio-television and Telecommunications Commission's Do Not Call rules, ensuring her clients remain compliant with marketing and electronic communication regulations.

Prior to joining Gowling WLG, Jasmine served as senior counsel at one of Canada's largest financial institutions. In this role, she provided legal advice on a variety of privacy, cyber security and social media issues globally, including implementing compliance measures for the General Data Protection Regulation (GDPR). Her experience also includes developing global privacy policies, consent frameworks and data protection agreements.