The Personal Information Protection and Electronic Documents Act (PIPEDA) has been Canada’s most significant legislative attempt to deal with privacy issues in society. The new Regulations under the Digital Privacy Act, which create privacy breach recording obligations, came into force on Nov. 1, 2018.
Although the Privacy Commissioner has provided guidance on these amendments previously, the guidance document was updated further on Oct. 29, 2018, along with a new form for reporting a privacy breach. The guidance form was finalized following 20 submissions from various sectors on the draft document.
Despite these changes, the Privacy Commissioner has noted that the amendments still don’t ensure that the breach reports contain information about the proactive safeguards that a business may use to prevent a breach.