On May 29, the federal government introduced Bill C-29, the Safeguarding Canadians' Personal Information Act, which makes substantial changes to the Personal Information Protection and Electronic Documents Act (PIPEDA). The Bill had been in development for several years, and one of its primary objectives was to address a significant gap in PIPEDA, the issue of mandatory disclosure of "material" breaches of personal information by the companies or organizations responsible.
I've discussed the Privacy by Design principle before, in the Inside Internal Control newsletter. In case you don't know, PbD is an approach developed by Dr. Ann Cavoukian, the Privacy Commissioner of Ontario, which proactively embeds privacy protection by default in the design of an organization's practices and products.
Established in 1995, First Reference is the leading publisher of up to date, practical and authoritative HR compliance and policy databases that are essential to ensure organizations meet their due diligence and duty of care requirements.