Month: November 2017

In July 2015, the Government of Canada amended the Personal Information Protection and Electronic Documents Act to require companies to disclose data breaches to the Privacy Commissioner of Canada and to affected individuals. The amendments would require companies to disclose breaches “if it is reasonable in the circumstances to believe that the breach creates a real risk of significant harm to an individual.”