Starting tomorrow when Alberta's Personal Information Protection Amendment Act takes effect, organizations covered by PIPA will have to notify the privacy commissioner when they experience a loss of personal information. Debbie Dresen of Davis LLP notes that "businesses that are not government bodies or public bodies will be subject to the new breach notification requirements." The legislation requires breaches to be reported where it has been determined that "a real risk of significant harm" is present. The commissioner may then require additional notifications."It will be interesting to see how organizations view and respond to the new requirements," Dresen writes. (Registration may be required to access this story.)
If you want to comment on this post, you need to login.