Alberta's New Data Breach Notification Law

By: Absolute Team | 6/28/2010

Alberta has become the first province in Canada to enact a data breach notification law. The notification requirement was added into the existing Personal Information Protection Act (PIPA) as of May 1, 2010.

The new law in Alberta includes Canada's first breach-reporting and notification requirements. Organizations who have had a data breach, one which has a "real risk of significant harm", must notify the privacy commissioner in Alberta. The commissioner then makes the decision if the organization must notify affected individuals. This decision process is quite different from many laws in the U.S.

There's a good overview of the amendment here.

Financial Services