You are also responsible for taking reasonable steps to protect your personal information against unauthorized disclosure or misuse. (petsmartcharities.ca)
It can be incredibly hard to prove unauthorized disclosure — and you also have to prove that you suffered monetary damages because of the disclosure. (inc.com)
Instructions are rarely given to an expert regarding the manner in which to store the data or the type of security controls that need to be employed to keep it safe from unauthorized disclosure. (slaw.ca)