Ottawa working on options regarding next steps for Canada-wide mandatory privacy breach notification

  • 19 January 2016
  • 1 reply
  • 62 views

Userlevel 7
Badge +54
DAILY NEWS Jan 18, 2016
 
Before the House of Commons was dissolved last summer to kick off the federal election, the ruling Conservatives passed the Digital Privacy Act, which creates new offences for failing to report data security breaches. However, nation-wide mandatory breach notification would not actually take effect unless the government develops regulations, and it is not clear whether the newly-elected Liberals plan to do this.
 
http://www.canadianunderwriter.ca/MktgImages/cu-ottawa/2015061213453400znwrmepz2mhkj550j3qngag.jpg
 
The Digital Privacy Act (Bill S-4 of the last session of Parliament) changes the Personal Information and Protection of Electronic Documents Act (PIPEDA) to include a new requirement for "organizations to notify certain individuals and organizations of certain breaches of security safeguards that create a real risk of significant harm and to report them to the Privacy Commissioner." Passed into law June 18, Bill S-4 also contains a requirement "organizations to keep and maintain a record of every breach of security safeguards involving personal information under their control."
 
 
Full Article
 

1 reply

Userlevel 7
Sounds like once again the Canadians have gotten it right...seems to make sense...what is always hard to find is the balance between going over the top and not doing enough in these situations. ;)

Reply