PIPEDA Compliance Bulletin on Mandatory Breach Reporting
As of November 1, 2018, organizations in Canada that suffer a data breach involving personal information must follow the Office of the Privacy Commissioner of Canada's final guidelines on mandatory breach reporting as outlined in the Personal Information Protection and Electronic Documents Act (PIPEDA).