Canadian companies will have new reporting obligations in the circumstances of a data breach from 1 November 2018, under the Digital Privacy Act.
Public consultation on the regulation guidelines closed on 2 October 2018, with final guidance to follow before the deadline.