Source: https://cybersecuritylaw.ca/home/2018/4/22/canadian-personal-information-security-breach-obligations-preparing-for-compliance