The Office of the Information and Privacy Commissioner (OIPC) recently released a report (Report) analyzing privacy “breaches” (as defined in the Report) in Alberta over the last decade, showing some interesting trends: 

OIPC’s Report suggests that the most common breaches have shifted from unintentional or non-malicious loss of information to intentional or malicious unauthorized access of information.

Organizations are obligated by PIPA to protect personal information in their custody or control by making reasonable security arrangements against breaches.

In the event of a breach, an organization with personal information under its control must, without unreasonably delay, notify the OIPC where a reasonable person would consider that, as a result of the breach, there exists a RROSH.

Organizations should regularly review and update their privacy and data policies to ensure compliance with privacy legislation and engage professionals immediately upon discovery of a breach.

If you have any questions, please do not hesitate to contact any of our Privacy & Cybersecurity lawyers.