On November 1, 2018, the federal government introduced new rules around how a business must report a data breach. There are five significant changes of which to be aware, including fines.
Amy Simpson of MicroAge Peterborough agrees that awareness is key. “Now more than ever we need to secure our businesses' IT / Data to minimize the risk of a breach. You are responsible for protecting your client’s data, and now there is the possibility of large fines if you don’t report it.”
As stated on the Privacy Commissioner of Canada website: “The amendments impose a new set of obligations onto organizations to inform individuals if their personal information has been lost, stolen or inappropriately accessed, and they are placed at risk of harm. Specifically, the Digital Privacy Act states that: