A bill to amend the Personal Information Protection and Electronic Documents Act (PIPEDA) was re-introduced by the Government of Canada this afternoon. Bill C-12, the Safeguarding Canadians' Personal Information Act, implements the government's Response to the Report of the Standing Committee on Access to Information, Privacy and Ethics issued in 2007. The Bill has not yet been posted but the CBC reports that it is identical to Bill C-29 introduced in May 2010.
Industry Canada has indicated that the "proposed amendments seek to 'fine-tune' the legislation and update it to reflect changes in markets and technology." The proposed amendments include:
- Mandatory data breach notification obligations that will require organizations to notify the Privacy Commissioner of Canada, individuals and potentially others under certain circumstances;
- Revisions to the consent provisions of PIPEDA; and
- Changes to ensure that PIPEDA can accommodate certain legitimate business needs related to information necessary for the management of employment relationships and information needed to complete business transactions.
AccessPrivacy will send a full summary of Bill C-12 shortly, and more information on the Bill is currently available on Industry Canada's website.