Breach of Security Safeguards Regulations (SOR/2018-64)

Marginal note:Record-keeping requirements

• 6 (1) For the purposes of subsection 10.3(1) of the Act, an organization must maintain a record of every breach of security safeguards for 24 months after the day on which the organization determines that the breach has occurred.

• Marginal note:Compliance

  (2) The record referred to in subsection 10.3(1) of the Act must contain any information that enables the Commissioner to verify compliance with subsections 10.1(1) and (3) of the Act.