Ms. Ruth Naylor (Executive Director, Information and Privacy Policy Division, Chief Information Officer Branch, Treasury Board Secretariat) at the Access to Information, Privacy and Ethics Committee

Yes, I can speak to that a little bit.

Institutions have a responsibility or an obligation under our Treasury Board policies to report privacy breaches that are material in nature, both to the Office of the Privacy Commissioner and to TBS. We work quite closely with the Office of the Privacy Commissioner to compare notes on those reports.

At TBS, we make a range of tools available to institutions to support them to identify, manage and do the reporting aspect of this. We work with the OPC and follow up with institutions where that's warranted.