New Data Breach Rules Come Into Effect Thursday, but Privacy Chief Says They Don’t Go Far Enough

New provisions in Canada’s Personal Information Protection and Electronic Documents Act require companies to quickly disclose security data breaches if they cause a risk of significant personal harm, but critics such as Privacy Commissioner Daniel Therrien say the law doesn’t go far enough to protect citizens’ privacy.