Privacy Training

Data collected in jurisdictions with mandatory breach reporting indicates that the most common cause of privacy breaches is human error. Such mistakes include inappropriate document disposal, loss of unencrypted portable data storage devices, sharing/disclosing passwords, misdirected faxes, and allowing all email addresses to be viewable in mass emails.

Privacy training can avoid these types of errors by ensuring that employees understand their obligations under applicable laws and policies, as well as how these laws and policies apply to their every day activities.

In addition to being good practice, to avoid privacy breaches, privacy training is required by law in Canada. Article 4.1.4 of the Personal Information Protection and Electronic Documents Act states that: "Organizations shall implement policies and practices to give effect to the principles, including... training staff and communicating to staff information about the organization's privacy policies