Several years after passing into law, the Canadian government has finally set an effective date for long-overdue data breach disclosure rules. The requirements were included in the Digital Privacy Act that was passed in 2015, but the accompanying regulations literally took years to finalize. Earlier this year, I argued that the failure to expedite security breach disclosure rules was an embarrassing failure for successive Conservative and Liberal governments, placing the personal information of millions of Canadians at risk and effectively giving a free pass to companies that do not adequately safeguard their customers’ information.
Archive for April 4th, 2018

Law Bytes
Episode 272: Build Canada’s Lucy Hargreaves on Canada’s AI Strategy and the Need to Shift From Being Users to Builders
byMichael Geist

May 25, 2026
Michael Geist
May 11, 2026
Michael Geist
Search Results placeholder
Michael Geist on Substack
Recent Posts
The Law Bytes Podcast, Episode 273: Rebroadcast of the Globe and Mail’s The Decibel on Canada’s First Steps Towards a Social Media Ban
Midnight Madness: The Government Rushes Lawful Access Bill Through the House Without Debate or a Recorded Vote
One Step Forward, Two Steps Back: Bill C-36 Modernizes Canada’s Privacy Law, Then Delays It to 2030
Gary Anandasangaree’s Vic Toews Moment Shows the Government Has Lost Its Way on Lawful Access
Government Moves to Shut Down Lawful Access Hearing In Order To Fast Track Passing the Bill This Week

