On October 31, 2019, the Office of the Privacy Commissioner of Canada shared what has been learned and what businesses need to know with respect to mandatory data breach reporting under Canada’s federal private sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA).