A privacy breach happens when personal information is stolen or lost — or is collected, used or disclosed without authority.

If a privacy breach occurs, immediately notify the relevant staff in your organization, identify the scope of the breach and take the steps necessary to contain it.

You must notify individuals as soon as possible of any breach in which their personal information was lost, stolen or used or disclosed without authority. You must also notify the IPC and the Minister of Children, Community and Social Services of certain privacy breaches.

Breach reports can be submitted to the IPC here. The IPC will review the information you provide and may decide to conduct an investigation in some cases.

Learn more about responding to privacy breaches.

This post is also available in: French