The aftermath of an incident: business considerations surrounding record-keeping
August 10, 2022
In our previous publication, we discussed the legal obligations and procedural considerations surrounding maintaining records of privacy incidents. While the specific obligations vary by jurisdiction, maintaining some form of a record that tracks privacy incidents is a statutory obligation for private-sector organizations subject to Quebec, Alberta, or federal laws. Organizations should also be aware of sector-specific statutory obligations which may apply to them, for example in health or financial services industries.