PIPEDA's final Breach of Security Safeguards Regulations were published today and will come into force on November 1, 2018, at the same time as the related data breach provisions under PIPEDA.

The regulations include specific requirements regarding:

  • the content, form and manner of reporting security breaches to the Office of the Privacy Commissioner of Canada;
  • the content, form, and manner of direct and indirect security breach notification to affected
  • individuals; and
  • record-keeping requirements.