While many of the recent amendments to Canada’s Personal Information Protection and Electronic Documents Act are in force, the new breach reporting and notification provisions are not yet. Timothy Banks, CIPP/C, writes for Privacy Tracker about what we know and what we can expect in terms of requirements for breach logs, reports and notifications under the new law. The information required to be included in reports to the Office of the Privacy Commissioner and individual notifications is expected to “be at least as comprehensive” as similar reporting obligations in Alberta, Banks notes. “What remains to be seen, however, is whether the government will ensure that the content of notifications remains harmonized to avoid the fractured approach in the United States,” he writes. (IAPP member login required.)
Full Story