Several years after passing into law, the Canadian government has finally set an effective date for long-overdue data breach disclosure rules. The requirements were included in the Digital Privacy Act that was passed in 2015, but the accompanying regulations literally took years to finalize. Earlier this year, I argued that the failure to expedite security breach disclosure rules was an embarrassing failure for successive Conservative and Liberal governments, placing the personal information of millions of Canadians at risk and effectively giving a free pass to companies that do not adequately safeguard their customers’ information.
Archive for April 4th, 2018

Law Bytes
Episode 279: My Keynote on Digital Sovereignty: Control, Choice, and Connection
byMichael Geist

October 19, 2026
Michael Geist
August 10, 2026
Michael Geist
Search Results placeholder
Michael Geist on Substack
Recent Posts
Making the Case Against Its Own Bill: What the Government’s Bill C-34 Charter Statement Reveals About the Constitutional Vulnerability of the Social Media Ban
“Position Has Not Changed”: The Canadian Government Reaffirms That Antisemitism Includes Anti-Zionism
The Law Bytes Podcast, Episode 279: My Keynote on Digital Sovereignty: Control, Choice, and Connection
The What, Me Worry? Consultation: Media Quietly Tells Government It Wants Even More Funding With Little Concern for Independence Risks
Years of Uncertainty: Bill C-22’s Missing Regulations and Secret Ministerial Orders

