QuestionQ6
Canadian Privacy Laws and Practices in the Private SectorUnder Alberta’s Personal Information Protection Act, which of the following data-breach reporting notifications to the Commissioner is not automatically required once a real risk of significant harm (RROSH) has been determined?
- A Providing a description of the steps the organization will take to notify the affected individual(s).
- B Providing a description of the steps the organization has taken to reduce or mitigate that harm.
- C Providing an estimate of the number of individuals affected by the breach.
- D Providing a description of the personal information involved in the breach.
Community Discussion