Citation[]
Government of Canada. Digital Privacy Act (Bill S-4) (June 18, 2015) (full-text).
Overview[]
The Act amends Canada's federal data protection statute, the "Personal Information Protection and Electronic Documents Act" (PIPEDA) including introducing a new data breach notification requirement and making other material changes to PIPEDA.
Under the Act, organizations will be required to notify the Privacy Commissioner and affected individuals of "any breach of security safeguards involving personal information under the organization's control, if it is reasonable in the circumstances to believe that the breach creates a real risk of significant harm to an individual." The Act provides for fines up to $100,000 for knowing violations of the breach notification requirements, and the requirement that organizations keep and maintain a record of every breach of security safeguards involving personal information under the organization's control.