Source: https://cybersecuritylaw.ca/home/2017/11/15/preparing-for-compliance-with-canadian-personal-information-security-breach-obligations