Private member's bill in Ontario would create duty to inform of security breach

Bill 38, introduced recently in the Ontario legislature by M.P. Tony Ruprecht, would impose a number of new requirements on credit bureaus, designed to reduce the incidence and damage caused by identity theft, as well as to protect consumers from unfair and damaging credit reporting practices. Among other protections, the bill would require credit bureaus and financial institutions to inform consumers when their personal information has been stolen or has gone missing - a measure that consumer and privacy advocates advocate, and that the Consumer Measures Committee is currently considering. CIPPIC News Release on Notification Requirement CMC Consultation on ID Theft