Cybersecurity ranks among the top organization-wide risk
management issues in both the private and public sector. Canada is
no exception. Canada has recently witnessed landmark legislative
amendments and regulatory activity, as well as an unprecedented
increase in privacy-related litigation, damage awards and class
action certifications.
In a recent key finding, PIPEDA Report of Findings #2016-005 -
Joint investigation of Ashley Madison, the Office of the Privacy
Commissioner of Canada provided crucial guidance to organizations
in relation to information protection and cybersecurity. In the
wake of a high-profile hack of the adult dating website Ashley
Madison, and publication of a significant amount of personal
information stolen in the hack, the Commissioner determined that
Ashley Madison had not complied with a number of obligations under
the Personal Information Protection and Electronic Documents
Act ("PIPEDA").
