Alberta is now the first province to have a data breach notification requirement in effect, SC Magazine reports, and experts believe the change could have a significant impact on practices across the country. Under the amendment to the Personal Information Protection Act (PIPA), which went into effect May 1, organizations must notify individuals placed at risk by a security breach and outline its circumstances, scope and timeline. Additionally, that information must be provided to the province's privacy commissioner with an assessment of the risk of harm to individuals and an outline of what has been done to reduce that risk and notify the victims. One expert suggests that, nationally, Alberta's law "is now going to be the standard, the way things are done."
Full Story