Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5)

Marginal note:Records

• 10.3 (1) An organization shall, in accordance with any prescribed requirements, keep and maintain a record of every breach of security safeguards involving personal information under its control.

• Marginal note:Provision to Commissioner

  (2) An organization shall, on request, provide the Commissioner with access to, or a copy of, a record.