Source: https://cybersecuritylaw.ca/home/2018/1/14/vtech-data-breach-enforcement-actions-guidance-for-data-security-and-privacy-law-compliance