EN · FR · PT · ES

Privacy and AI governance, proven in practice.

I turn cross-border data and AI rules into working programs, for governments, regulated industries, and the institutions that have to get this right. LL.D., CIPP/C, CIPM.

Cristiano Therrien
LL.D.· CIPP/C· CIPM· OCAP®· Lecturer (UdeM and TMU)· Associated Researcher (CLTS, uOttawa)· Law Professor (Brazil)

The through-line

Responsible data governance is never only legal. It is legal, ethical, and operational at once, and my work holds the three together.

About

A scholar-practitioner for the hard problems in this field.

I am a privacy and AI governance advisor and legal scholar based in Toronto, working with law and AI in three jurisdictions (Ontario, Québec, and Brazil) and three languages (English, French, and Portuguese). As Privacy Consultant at Open North, I advise on privacy, cybersecurity, and ethical data governance; that work included the Montréal en commun smart-city program with the City of Montréal, which ran from 2021 through early 2026.

That practice rests on a doctorate in law (LL.D.) from the Université de Montréal, postdoctoral AI-regulation research at the University of Ottawa, and a teaching practice spanning the Faculté de droit (Faculty of Law) of the Université de Montréal, the Lincoln Alexander School of Law at Toronto Metropolitan University, and graduate law programs in Brazil (University of Passo Fundo and Rio de Janeiro State University). My practice background also spans IT/IP and technology contracts.

I work across law and technology in both directions: bringing governance and legal reasoning to technology, and bringing proven technology into legal practice. I help law firms and legal departments adapt to the evolving AI landscape and adopt the tools that have shown real, practical use over the past two years, and I provide AI training for legal professionals, built on the JIRAF and JURIS protocols I created for orienting and verifying AI-assisted work.

Advisory

What I help organizations do.

Privacy and AI governance are program and compliance functions, while helping legal teams adopt technology well is a discipline of its own. The work below is strategic, operational, and policy-focused.

01

Privacy programs

Design and strengthen privacy programs aligned with Law 25, PIPEDA, and cross-border data-transfer requirements: assessments, governance, and the operational habits that keep them compliant.

02

AI governance

Translate AI rules and frameworks (NIST AI RMF, ISO/IEC 42001, the Treasury Board direction on automated decision-making) into controls a team can run and evidence.

03

Legal technology & AI adoption

Help law firms and legal departments adapt to the evolving AI landscape and adopt proven legal-technology tools, with the orientation and verification discipline legal work demands.

04

Data governance & training

Ethical data governance for the public sector and regulated industries, plus structured AI training for legal professionals in Canada and Brazil.

Current

Where the work happens.

Privacy Consultant
Open North. Privacy, cybersecurity, and data governance
present
Lecturer
Faculté de droit, Université de Montréal
present
Lecturer
Lincoln Alexander School of Law, Toronto Metropolitan University
present
Law Professor (graduate programs)
University of Passo Fundo (PPGD) and Rio de Janeiro State University (UERJ, with ITS Rio), Brazil
present
Associated Researcher
Centre for Law, Technology and Society, University of Ottawa. AI regulation
present

Research & publications

The research behind the advice.

My doctoral and postdoctoral work covers the legal governance of AI, data protection, and digital infrastructure, alongside public testimony before legislators.

In 2025, I testified before the Special Committee on Artificial Intelligence of the Brazilian Chamber of Deputies on AI infrastructure, regulatory sandboxes, and digital sovereignty. My research focus is the legal governance of AI, data protection, and digital policy across jurisdictions.

View the full publications and presentations page →

Speaking

Talks, panels, and teaching.

I speak on privacy, AI governance, and the practical discipline of using generative AI responsibly in legal and policy work, in English, French, and Portuguese.

Invite me to speak

Contact

Let's talk.

Whether you are an organization, an institution, or a peer, a single message is all it takes to reach me.

Advisory & consulting

Privacy and AI governance programs, data governance, assessments.

Speaking & training

Keynotes, panels, workshops, and Continuing Legal Education on AI governance and digital law.

Research & academia

Collaboration, guest lectures, and co-authorship.

All fields are required.