As described in numerous
previous articles over the course of 2019, the past year saw an
unprecedented number of breach notifications in Canada. In Europe,
under the scrutiny of the General Data Protection Regulations
("GDPR"), there were a
whopping 89,200 notifications in the first twelve
months of the GDPR coming into force in May 2018.
To round out this turbulent year, we thought it was time to
revisit the developments since the beginning of the year, as well
as take note of the important recent summary by the federal Office of the
Privacy Commissioner ("OPC"). With that,
"once more unto the (data) breach..."
Breach Notification – by the Numbers
In Canada, under the breach notification provisions of the
Personal Information Protection and Electronic Documents
Act ("PIPEDA"), there have been 680
breach reports filed at a federal level1 since November 1,
2018 (the date on which notification became mandatory). This number
is up from just over 100 (voluntary)