PIPEDA

  • The many lessons of the Equifax data breach

    Apr 15, 2019

    The Equifax decision and related compliance agreement between the OPC and Equifax Canada that that sets out detailed timelines for various corrective measures to be put in place by Equifax Canada regarding consent, safeguards and accountability in addition to six years of third party audits, offers a treasure trove of practical lessons for organizations looking to comply with the Personal Information Protection and Electronic Documents Act (as well as some surprises).

  • OPC understaffed as mandatory data breach reporting comes into effect

    OPC understaffed as mandatory data breach reporting comes into effect

    Nov 1, 2018

    ​Amendments to the Personal Information Protection and Electronic Documents Act, which require mandatory reporting of unauthorized disclosure of personal information by private sector organizations, come into effect today, but federal Privacy Commissioner Daniel Therrien says his office was not given additional resources to handle the data-breach reporting.

  • Credit card purchases for cannabis may not be private

    Credit card purchases for cannabis may not be private

    Oct 24, 2018

    Federal legislation makes it legal for Canadians to enjoy cannabis in the privacy of their homes. That legislation, however, does not necessarily offer privacy protection for cannabis purchasers. Legal experts have raised concerns that credit card data may not be stored in this country and may be accessible to prying eyes in other countries.