A due diligence request list to evaluate a prospective target's compliance with Canada's privacy and data security laws and Canada's Anti-Spam Legislation (CASL). This request list provides broad coverage of privacy and data security due diligence issues. It can supplement a standard merger and acquisition due diligence request list where the target carries on activities that are potentially subject to privacy and data security laws. This Standard Document has integrated notes with important explanations and drafting tips.