On May 1, 2010 amendments to Alberta’s privacy legislation come into effect. The Personal Information Protection Amendment Act will include Canada’s first mandatory breach notification requirements. Organizations covered by PIPA may be required to notify the Privacy Commissioner of a loss, theft, or unauthorized disclosure of personal information, including personal employee information. Businesses that are not government bodies or public bodies will be subject to the new breach notification requirements. Generally, the unauthorized collection, use or disclosure of third party personal information, including employee information, may be a breach.
This bulletin outlines the steps organizations will need to take in light of these amendments.
