The government's response to the PIPEDA review included a promise to consult on possible reforms to the law, including the creation of a mandatory data breach notification requirement. On Friday, Industry Canada published the promised consultation in the Canada Gazette, asking Canadians for comments on the data breach requirement along with a series of smaller changes to Canada's national privacy law. For those that don't have PIPEDA consultation fatigue – this is effectively the third consultation on these issues in the past 18 months (the Privacy Commissioner consultation, the Ethics Committee hearings, and now the Industry Canada consultation) – the deadline for responses is January 15, 2008.
Industry Canada Launches Public Consultation on PIPEDA Reforms
One Comment
Recent Posts
Back-of-the-Napkin Cultural Policy: The Government’s $600 Million Streaming Plan Copies the CRTC Decision It Killed at More Than Double the Cost 
The Law Bytes Podcast, Episode 282: Udbhav Tiwari on Why Signal May Exit Canada Over Bill C-22’s Encryption and Metadata Retention Rules 
From Making Web Giants Pay to Paying Media Giants: Budget 2026 Replaces the Government’s Internet Platform Strategy With $1.5 Billion in Taxpayer Dollars for Culture and News 
Has the Government Read Its Own Bill? What Three Days of House Debate Revealed About Bill C-34 Before the Committee Hearings Begin 
Surveillance By Design: Government Officials Say Lawful Access Could Reach Gaming Platforms, Daycares and AI Services
It is about time the government stepped in and began forcing “all” organizations to assist the innocent public with mandatory notification. They must be made to take responsibility for their errors. Of course, notification is now insufficient without some kind of credit monitoring offer as well.