A Private Member's Bill entitled, the Personal Information Protection and Identity Theft Prevention Act, was recently introduced in the Legislative Assembly of Manitoba. The Bill applies to the collection, use and disclosure of personal information by private sector organizations.

The Bill contains a mandatory security breach notification requirement and a private right of action that allows an individual to commence an action against an organization for a failure (i) to protect personal information in its custody or control, or (ii) to provide notice of a security breach if it was not reasonable for the organization to have been satisfied that personal information would not be used unlawfully.