Virtual Assistants near you

The Personal Information Protection and Electronic Documents Act applies to private-sector organisations that collect, use or disclose personal information in the course of commercial activity, and it is built on ten fair information principles. The first is accountability, and it settles the question directly: an organisation is responsible for personal information in its possession or custody, including information that has been transferred to a third party for processing. Engaging a virtual assistant does not move that responsibility to them.

The Office of the Privacy Commissioner's guidance is that organisations must use contractual or other means to ensure a comparable level of protection while a third party processes the information, limit the third party's use of it to the purposes of the contract, ensure subcontractors are held to the same standards, and be transparent with customers, including telling them when information may be sent to another jurisdiction for processing where it could be accessed by courts, law enforcement or national security authorities. That last point matters whenever your assistant works outside Canada.

The safeguards principle asks for protection appropriate to the sensitivity of the information, through physical, technological and organisational measures, and it names staff training, limiting access and security agreements among the organisational ones. Breach obligations also stay with you: a breach that creates a real risk of significant harm must be reported to the Privacy Commissioner and the affected individuals notified as soon as feasible, and you must keep a record of every breach of security safeguards, whether or not it was reportable.

Calling someone a contractor does not make them one. Outside Quebec the Canada Revenue Agency uses a two-step approach: first, what did the parties intend, a contract of service or a contract for services; then, does the actual working relationship reflect that intention. The facts of the relationship as a whole decide the status.

The factors the CRA weighs are control, including that it is the payer's right to exercise control that matters rather than whether they use it; who provides the tools and equipment; whether the worker can subcontract or hire assistants; the degree of financial risk the worker carries; their responsibility for investment and management; and their opportunity for profit. A virtual assistant who serves several clients, works from their own equipment, sets their own hours and invoices for results looks self-employed. One who works fixed hours you set, only for you, on your equipment, under your daily direction, starts to look like an employee, with payroll, deduction and remittance consequences. If you genuinely cannot tell, either party can ask the CRA for a ruling on whether the employment is pensionable or insurable.

An independent assistant gives you one person who learns your business properly, and usually the most flexibility. The risks are concentration and continuity: holidays, illness or a better client can leave you without cover, and everything they learned lives only in their head unless you insist on written procedures.

An agency solves continuity by assigning and replacing people, and typically brings its own security and privacy practices, which you should still review rather than assume. You trade away some of the relationship and often pay more. Hiring part-time staff makes sense once the work is genuinely full days, genuinely on your schedule and genuinely under your direction, which is also the point at which the contractor framing stops holding up. Where an agency or assistant is outside Canada, treat the cross-border transfer as something to disclose in your privacy statement rather than something to leave unsaid.