Following the introduction of the Digital Privacy Act, the Personal Information Protection and Electronic Documents Act (PIPEDA) has been amended to include mandatory breach notification (see Canada amends PIPEDA).
Innovation, Science and Economic Development Canada is seeking public input as it moves to draft the regulations which will make up the bulk of the breach notification provisions. The details can be found at https://www.ic.gc.ca/eic/site/smt-gst.nsf/eng/sf11177.html. The deadline for submission is May 31, 2016.
The introduction of mandatory breach notification is a significant change in PIPEDA. This request for input is a valuable opportunity for privacy professionals to contribute to a workable, practical framework for the implementation of this change.