Several years after passing into law, the Canadian government has finally set an effective date for long-overdue data breach disclosure rules. The requirements were included in the Digital Privacy Act that was passed in 2015, but the accompanying regulations literally took years to finalize. Earlier this year, I argued that the failure to expedite security breach disclosure rules was an embarrassing failure for successive Conservative and Liberal governments, placing the personal information of millions of Canadians at risk and effectively giving a free pass to companies that do not adequately safeguard their customers’ information.
Post Tagged with: "data breach disclosure"
Canwest on Data Breach Disclosure Legislation
Canwest reports on the growing demands for data breach disclosure legislation in Canada.

Law Bytes
Episode 278: Ben Waldman on Gander Social and the Challenges of Building a Sovereign Social Network
byMichael Geist

August 10, 2026
Michael Geist
Search Results placeholder
Michael Geist on Substack
Recent Posts
The Missing Charter Statement: Why Hasn’t the Government Explained How Bill C-34’s Social Media Ban Complies with the Charter?
Three Years After October 7th: Living With the Shockwaves
What If the U.S. Demanded This? The Cloud Provider Conditions Behind Canada’s EU Digital Pivot
Ontario is Done Waiting for Universities to Act on Campus Antisemitism
Is Compromise on Encryption Possible? Why Bill C-22’s “Minor Opening” Leaves the Central Question Unanswered

