Posted on Tuesday, January 8th, 2019 by Véronique Faucher-Lefebvre
In order to harmonize the Canadian requirements to the General Data Protection Regulation (GDPR) in the European Union, the Government of Canada issued final provisions on the mandatory reporting and recording of privacy breaches according to Canada’s PIPEDA. The new regulations, also known as the Digital Privacy Act, came into force on November 1st, 2018.
Under the Digital Privacy Act, Canadian and non-Canadian organizations subject to PIPEDA will need to take necessary steps for compliance. This amendment to Canadian federal law primarily relates to three areas: 1. Data breach record keeping, 2. Data breach reporting and 3. Data breach notification.