Person typing on keyboard

Any Canadian business that collects personal information about residents of the European Union — whether they’re tourists, students or online customers — risks maximum fines of $30 million or more if a sweeping new EU privacy law that takes effect Friday is violated.