Digital concept of graphs

The aftermath of an incident: business considerations surrounding record-keeping

August 10, 2022

In our previous publication, we discussed the legal obligations and procedural considerations surrounding maintaining records of privacy incidents. While the specific obligations vary by jurisdiction, maintaining some form of a record that tracks privacy incidents is a statutory obligation for private-sector organizations subject to Quebec, Alberta, or federal laws. Organizations should also be aware of sector-specific statutory obligations which may apply to them, for example in health or financial services industries.

Continue reading