Share on LinkedInShare on LinkedIn

ARTICLE · 15 MARCH 2019

Frequently Asked Questions — Compliance With PIPEDA's Security Breach Obligations

Borden Ladner Gervais LLP
Borden Ladner Gervais LLP
Contributor
Borden Ladner Gervais LLP

Borden Ladner Gervais LLP

With over 750 lawyers, intellectual property agents and other professionals, BLG services...

View firm profile
Explore more from Borden Ladner Gervais LLP

Canada's federal PIPEDA imposes obligations on private sector organizations that suffer a breach of security safeguards affecting personal information under their control.

CanadaPrivacy
Bradley Freedman
Bradley Freedman
Éloïse Gratton
Éloïse Gratton
Elisa Henry
Elisa Henry
Author LinkedIn connections

Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA) imposes obligations on private sector organizations that suffer a breach of security safeguards affecting personal information under their control.

Details of those obligations are set out in PIPEDA, the Breach of Security Safeguards Regulations and the guidance document titled "What you need to know about mandatory reporting of breaches of security safeguards" issued by the Office of the Privacy Commissioner (OPC) (the Guidance).

Following are some frequently asked questions about the breach of security safeguards obligations and related issues.

A. BACKGROUND AND DEFINITIONS

What activities are regulated by PIPEDA?

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

OPC Issues New PIPEDA Guidance On Assessing Third-Party Service Providers

Canada's privacy regulator has released new draft guidance establishing comprehensive due diligence standards for organizations evaluating third-party service providers under PIPEDA. The framework introduces eleven best practices covering everything from data flow mapping and AI training data sourcing to vendor lock-in risks and ongoing monitoring obligations, signaling heightened expectations for privacy accountability in vendor relationships.
CanadaPrivacy
Bennett Jones LLP
Bennett Jones LLP
Article

From Duties To Import Bans: The Canada–U.S. Tariff War After The Collapse Of Negotiations

The United States has escalated its trade dispute with Canada by imposing import bans on alcoholic beverages, dairy products, and motorcycles under Section 338 of the Tariff Act of 1930, while Canada responds with matched counter-tariffs on $27.6 billion worth of U.S. goods. Following the collapse of bilateral negotiations in August 2026, both nations have entered an unprecedented phase of trade restrictions that extends beyond traditional tariffs to include procurement exclusions and threatens further auto
GlobalInternational Law
Borden Ladner Gervais LLP
Borden Ladner Gervais LLP
Article

Canada Investment Summit 2026: What Business Leaders Need To Know

Canada's inaugural Investment Summit in September 2026 aims to attract $1 trillion in investment across defence, infrastructure, Indigenous partnerships, technology, energy, critical minerals and agriculture. This analysis examines the federal measures shaping the Summit's agenda and outlines the key legal, regulatory and structuring considerations businesses and investors should evaluate when assessing nation-building opportunities in Canada.
CanadaGovernment, Public Sector
Borden Ladner Gervais LLP
Borden Ladner Gervais LLP
Article

New Churchill Falls Agreement: Key Terms For Newfoundland And Labrador, Québec And Canadian Power Markets

Newfoundland and Labrador's House of Assembly has approved a landmark definitive cooperation and implementation agreement that would replace the 1969 Churchill Falls Power Contract, pair the redevelopment of Churchill Falls with the Gull Island project, and establish new transmission pathways through Québec. The agreement faces political uncertainty in Québec ahead of the October 2026 provincial election...
CanadaEnergy and Natural Resources
Borden Ladner Gervais LLP
Borden Ladner Gervais LLP
Article

SCC Clarifies When Administrative Errors Are “irregularities” Requiring Annulment Of Election

The Supreme Court of Canada annulled a federal election in Terrebonne, Quebec after a single mail-in ballot went uncounted due to an Elections Canada administrative error—a postal code mistake that directly affected the one-vote margin of victory. In a 6-3 decision, the majority clarified that serious administrative errors can constitute "irregularities" under the Canada Elections Act even without fraud or intentional wrongdoing, fundamentally reshaping how courts balance electoral integrity against v
CanadaLitigation, Mediation & Arbitration
Borden Ladner Gervais LLP
Borden Ladner Gervais LLP
Article

New AI Safety Standard Relevant To Canadian School Boards

A major U.S. vendor agreement has established a rigorous new AI safety standard for educational technology, prohibiting the use of student data for AI training and enforcing strict data minimization. While the standard does not directly bind vendors in Canada, Canadian school boards can leverage this precedent to demand equivalent contractual protections and strengthen their own AI governance frameworks.
CanadaTechnology
Borden Ladner Gervais LLP
Borden Ladner Gervais LLP