QuestionQ11
Canadian Privacy Laws and Practices in the Private SectorA federally regulated company headquartered in Ontario has customers in Ontario, Quebec, New Brunswick, Alberta, and British Columbia. Unfortunately, a third-party vendor that supplies marketing support to the company suffers a privacy breach affecting the personal information of all of the company’s customers across the provinces in which it operates.
The Privacy Officer concludes that the breach creates a real risk of significant harm to customers and must report the breach to the applicable regulators.
With which provincial privacy regulators must the company file a report?
- A It is unnecessary to file a report with any provinces because the company is federally regulated
- B All of the provinces where its customers are located
- C New Brunswick and British Columbia only
- D Québec and Alberta only
Community Discussion