That's an interesting point. There was another circumstance, which may be related but in the sense of the responsibility and the duty to protect, and that was the loss of some personal information in another agency, Human Resources and Skills Development Canada. There is no specific legislative liability within the Privacy Act for those who fail in that duty to protect, to keep the statute whole.
