Cyber Insights – Digital Privacy Regulations Changes – November 1, 2018
While Alberta brought in similar legislation in 2015, the rest of Canada is now falling in line as government regulations changed on November 1st to amend the Personal Information Protection and Electronic Documents Act. This means that there will be a requirement applicable to all Canadian entities to notify individuals of any breach in their personal information that could cause potential harm. There will also be added obligations to record all breaches of personal information and to report them to governmental authorities. Review the details of your Cyber coverage as it may not fully respond to these liabilities. Contact your Lloyd Sadd expert advisor today.
Highlights:
- Changes to Digital Privacy Regulations are effective November 1st
- The new legislation mainly relates to mandatory reporting. A business owner will now be obligated to report any breach to the Privacy Commissioner of Canada
- A business owner is also obligated to notify individuals who have been affected in a prescribed format
- Business owners must maintain a record of breaches for a minimum of 24 months
- Failure to report a breach or to maintain adequate records can result in fines of up to $100,000 per violation