How best to deal with new breach notification requirements? Avoid a breach in the first place! - NAID-Canada recommends adopting safe information destruction practices

OTTAWA, June 18, 2015 /CNW/ - The National Association for Information Destruction – Canada (NAID-Canada) today welcomed passage of Bill S-4 in the House of Commons. The Bill amends Canada's private sector privacy law to include a breach notification requirement and a provision that requires organizations to maintain a record of all privacy breaches. In addition, the Privacy Commissioner of Canada has been granted fining power of up to $100,000 for organizations that fail to meet these standards.

NAID-Canada used this occasion to remind organizations that the best way to avoid the cost of a breach is to not suffer one in the first place. 

"As evidenced by regular news headlines, too many privacy breaches are still the result of simple but careless actions, such as leaving documents containing personal information in garbage containers, recycling bins or stored on discarded electronic equipment," stated Kristjan Backman, Chair of NAID-Canada. "These breaches are easily avoidable by ensuring information is safely destroyed at the end of its lifecycle."

As the new breach and fining provisions take effect, NAID-Canada recommends that all organizations perform a compliance check to ensure they meet privacy standards, including an assessment of their document destruction practices. 

"Information is only as secure as the weakest link in its lifecycle, yet often little attention is paid to the end of its lifecycle. However, all steps taken to protect personal information during its useful life are undermined without proper care applied to safe information destruction and disposal," added Backman.

NAID-Canada believes all privacy legislation in Canada should have a specific information destruction requirement and a clear definition of destruction, and will continue to advocate for that at the federal and provincial level. This is the trend in much of the rest of the world.

"Information destruction is too important to be left to interpretation. While Bill S-4 is a welcome step and we fully support breach notification, now is the time to look at privacy protection from a broader perspective and strengthen provisions to prevent breaches in the first place," added Backman.

About NAID-Canada
NAID-Canada is the national non-profit association representing companies that specialize in secure information and document destruction. NAID-Canada's mission is to raise awareness and understanding of the importance of secure information and document destruction. In doing so, its goal is to ensure that private personal and business information is properly protected from unauthorized access. NAID-Canada also plays an active role in the development and implementation of industry standards and certification and provides a range of member services which include advocacy, communication, education and professional development.

NAID-Canada is part of the global National Association for Information Destruction, which has chapters around the world. 

SOURCE NAID-Canada

Duncan Rayner, 613-241-6000, ext 223