The second question I have is something a little bit different. It concerns privacy breaches. Your ATIPPA says that every public body must report a privacy breach.
My question is two-fold. What is the onus on them to do that, and what enforcement do you have to make sure that they comply with that part of the legislation?