Business Advice for Data Breaches
DATA LOSSMarch 30, 2012
In light of recent large-scale breaches and the 2012 Verizon Data Breach Investigations Report, a column in The Montreal Gazette offers businesses advice for mitigating data breach risk and implementing breach response policies and best practices. In the House of Commons, Bill C-12 would require businesses to disclose data breaches to the Office of the Privacy Commissioner and to affected individuals, while businesses subject to PIPEDA would be required to appropriately respond to a breach. "We can anticipate that Quebec will introduce a similar obligation" in the near future, the report states, and businesses can take heed from guidance issued by the U.S. Securities and Exchange Commission to account for cybersecurity obligations.