Concerns about the security of personal information have been heightened by recent news reports of identity theft and computer security breaches resulting in the unauthorized disclosure of confidential personal information, and at least one Canadian class action lawsuit commenced over a missing computer hard drive containing the personal information of hundreds of thousands of Canadians.
Effective 1 July 2003, a new California law will require organizations to give notice of computer security breaches that result in the unauthorized disclosure of certain unencrypted personal information. While there is no comparable Canadian law, Canadian organizations are under a duty to secure the personal information they collect, and in some circumstances may be required to disclose security breaches.

type Security and Disclosure Obligations Under Canadian Privacy Law