Bill C-580

SUMMARY

This enactment amends the Privacy Act to require government institutions to inform the Privacy Commissioner of the loss or unauthorized disclosure of, or unauthorized access to, personal information if there is a risk of harm to an individual because of that loss, access or disclosure. The enactment also gives the Privacy Commissioner the power to make compliance orders and requires that a comprehensive review of the Act be conducted at least once every five years.