What you should know about Digital Privacy Act of Canada?

1. What you should know about digital privacy act of Canada? The Digital Privacy Act of Canada was formed with the sole intention to provide organizations with a strategic roadmap that can be used in case of any breach takes place. Digital Privacy Act has come up with certain effective obligations that can help both organizations and individuals associated with those organizations. These obligations and other specific rules of the Digital Privacy Act need to be strictly followed by those Canadian organizations that fall under the Digital Privacy Act. Hence, Organizations in Canada must also make it a point to stringently follow the protocols laid down by the Digital Privacy Act and thus act in line with this valuable act. In this article, you will get a brief idea and information about the significance of the Digital Privacy Act of Canada. The Digital Privacy Act of Canada: At the start of 2015, the changes made to the Personal Information Protection and Electronic Documents Act (PIPEDA) was approved by the Canadian Government and finally, it was officially passed into law on June 18, 2015. It was further known by many names but most notably was called Bill S-4 or the Digital Privacy Act, which is an amendment to PIPEDA. Under the Digital Privacy Act, the data protection tools and data security practices need to be thought over by organizations. Any organization that uses, collects and discloses personal information in the course of any commercial activity in Canada must follow record-keeping, reporting and notification rules.

2. Following are the three new and important obligations that are implemented by Digital Privacy Act: 1. Record-keeping: Every single instance of a "breach of security safeguards" should be documented by organizations. It involves personal information under its control - no matter how irrelevant and insignificant the likelihood or risk of harm. The records about a breach need to be maintained by organizations for 24 months after the day on which it is ascertained that the breach has occurred. Based on the Privacy Commissioner's request, the Privacy Commissioner must be provided with access to or a copy of the record by organizations. What should be contained in a record is not set out by Regulations, but, if any information pertaining to the breach must be given to the Privacy Commissioner, so that compliance can be verified with the breach notifications sections of the Digital Privacy Act. It is considered to be an offence when such records are not kept or are not provided to the Privacy Commissioner upon request. 2. Reporting: If the organization states that its security safeguards have been breached that involves personal information under its control. If the organization's circumstances are reasonable enough to believe that the breach creates the risk of significant harm to an individual, then a report must be prepared and sent to the Privacy Commissioner detailing the information that includes the Breach of Data Safeguard Regulations details. If new and pertinent information has been sent to the organization after the initial report has been sent to the Privacy Commissioner, then the new information can be submitted to the Commissioner. 3. Notification: In certain scenarios wherein an organization knows that a real risk of significant harm is created by the breach, then not only the Privacy Commissioner must be notified and reported about this issue, but, the affected individuals should also be notified accordingly. Enough information should be included in the notice so that the significance of the breach can be properly understood by the individual and if possible the risk of harm should be reduced. The new regime also distinguishes between as to when "direct notification" must be given to individuals by an organization and when "indirect notification" should be given. Indirect notification can be used by an organization, such as posting on its website. Conclusion: If you are looking forward to implementing software accessibility testing for your specific software development project, then do visit online a highly rewarding software testing services company that will provide you strategic advice along with tactical and proven testing strategies that are in line with your project specific requirements.