Proposed amendments to Canada's private sector privacy law would require that companies report material data breaches to the Office of the Privacy Commissioner and notify affected individuals in cases involving significant risks, The Vancouver Sun reports. The government tabled the proposed amendments on Tuesday. They would require companies to notify affected individuals "when the organization deems the breach to pose a real risk of significant harm, such as identity theft, fraud or damage to reputation." Privacy Commissioner Jennifer Stoddart welcomed the proposal, but Janet Lo of the Public Interest Advocacy Centre said "that's a really, really high trigger threshold to inform the individual." University of Ottawa law professor Michael Geist described the Safeguarding Canadians' Personal Information Act as "the anti-privacy privacy bill."
Full Story