The government's response to the PIPEDA review included a promise to consult on possible reforms to the law, including the creation of a mandatory data breach notification requirement. On Friday, Industry Canada published the promised consultation in the Canada Gazette, asking Canadians for comments on the data breach requirement along with a series of smaller changes to Canada's national privacy law. For those that don't have PIPEDA consultation fatigue – this is effectively the third consultation on these issues in the past 18 months (the Privacy Commissioner consultation, the Ethics Committee hearings, and now the Industry Canada consultation) – the deadline for responses is January 15, 2008.
Industry Canada Launches Public Consultation on PIPEDA Reforms
October 29, 2007
Share this post
One Comment

Law Bytes
The Law Bytes Podcast, Episode 248: Mark Surman on Why Canada's AI Strategy Should Prioritize Public AI Models
byMichael Geist

November 3, 2025
Michael Geist
October 27, 2025
Michael Geist
October 20, 2025
Michael Geist
October 6, 2025
Michael Geist
September 22, 2025
Michael Geist
Search Results placeholder
Recent Posts
The Law Bytes Podcast, Episode 248: Mark Surman on Why Canada’s AI Strategy Should Prioritize Public AI Models
We Need More Canada in the Training Data: My Appearance Before the Standing Committee on Canadian Heritage on AI and the Creative Sector
The Law Bytes Podcast, Episode 247: My Senate Appearance on the Bill That Could Lead to Canada-Wide Blocking of X, Reddit and ChatGPT
The Law Bytes Podcast, Episode 246: Mohamed Zohiri on the Rise and Emerging Regulation of Stablecoins
Senate Bill Would Grant Government Regulatory Power to Mandate Age Verification For Search, Social Media and AI Services Accompanied By Threat of Court Ordered Blocking of Lawful Content

It is about time the government stepped in and began forcing “all” organizations to assist the innocent public with mandatory notification. They must be made to take responsibility for their errors. Of course, notification is now insufficient without some kind of credit monitoring offer as well.