(Disponible uniquement en anglais.) The CBA looks at PIPEDA's data breach notification and reporting requirements and recommends regulations to balance individual privacy rights with the needs of businesses to collect, use and disclose personal information for reasonable purposes.