Starting November 2018, all companies operating in the Canadian territory are mandated to report breaches that happened in their organization to the Office of Privacy Commissioner of Canada. The agency is set to slap the corporate violators with Canadian $100,000 fine for each instance of data breach offense. The OPC through its directive is also forcing companies that experienced security breaches to contact the owners of the stolen information ASAP. Informing them of their options and giving them mitigation steps on how to lessen the impact of the hacking event.”]
Source: https://hackercombat.com/canada-is-imitating-eus-gdpr-new-policy-takes-effect-on-nov-2018/