Privacy Advisor

CANADA—Decisions shed light on notification rulings

04.01.2011
Effective May 1, 2010, amendments to Alberta’s Personal Information Protection Act (PIPA) created an obligation for organizations to notify the Information and Privacy Commissioner of any incident involving the loss of or unauthorized access to or disclosure of PI, “where a reasonable person would consider that there exists a real risk of significant harm to an individual as a result of the loss or unauthorized access or disclosure.” The amended PIPA also provides that the commissioner may require the organization to notify individuals to whom there is a real risk of significant harm as a result of the loss or unauthorized access or disclosure, “in a form and manner prescribed by the regulations,” and “within a time period determined by the commissioner.”

Already a member?

You must be logged in to access this content. Log in now to proceed.

Not an IAPP member?

It's easy and affordable to become an IAPP member, and you'll get access to the following great benefits:

  • News. You’re busy. We make it easy to stay on top of the headlines.
  • Networking. It’s all about who you know. Targeted online and in-person channels give you access to the people you want to meet.
  • Certification. Skilled privacy pros are in high demand. We can help you advance your career and increase your earning potential.
  • Resources. The newly revamped Resource Center is a one-stop-shop for practical tools and research to help you tackle your biggest challenges.
  • Alerts. The Privacy Tracker blog sorts through the clutter and gets to the heart of breaking legislative developments.

...and much more!