How to Report a Breach
As of April 1, 2018, changes to the Right to Information and Protection of Privacy Act’s Regulations requires, in certain circumstances, public bodies to notify the affected individuals and the Commissioner as soon as possible of privacy breaches involving an individual’s personal information. To assist public bodies in respecting the new mandatory reporting requirements, we have developed a new Privacy Breach Report Form (found here) that we ask public bodies to fill out and submit to our Office.
Guidance documents are issued by the Commissioner under the authority the Right to Information and Protection of Privacy Act. The Commissioner will be issuing guidance documents as questions of interpretation of this legislation arise.