# Insights — Cybersecurity, Compliance & IT for Canada | RedactLabs

> Source: https://redactlabs.ca/blog/
> Machine-readable Markdown of this page (also served at this URL under `Accept: text/markdown`).

# Writing on what actually matters.

Long-form on cybersecurity, charity-sector compliance, and Canadian IT operations — from the engineers running the environments. No listicles. Long-form, and only when something is worth saying.

- May 2026 · compliance · NIST CSF 2.0 for Canadian SMBs — what's actually new · The Cybersecurity Framework 2.0 added a sixth function (Govern) and refocused the rest. For a Canadian SMB, the practical shift is about ownership, not new controls. · [Read the Insight](/blog/nist-csf-2-canadian-smbs/)
- Apr 2026 · compliance · PIPEDA, Quebec Law 25, PHIPA — a privacy primer for Canadian nonprofits · Three privacy regimes apply to most Canadian charities, and they don't all say the same thing. A short, no-jargon guide to what each one actually requires, who it applies to, and where they conflict. · [Read the Insight](/blog/canadian-privacy-laws-nonprofits/)

## New writing, when there is something to say.

No marketing, no sales drips. Just the writing. Confirm the link we email you — that click is your consent, and every issue carries a one-click unsubscribe.