The commissioner's third recommendation is to make reporting of privacy breaches mandatory. Can either of you comment on both the cost and benefits of implementing mandatory reporting and what steps would be necessary to ensure that the act of reporting does not compound damages to individuals who have suffered a breach of privacy?
On November 24th, 2016. See this statement in context.