Report a privacy breach at your organization
A privacy breach is the loss of, unauthorized access to, or disclosure of, personal information. Breaches can happen when personal information is stolen, lost or mistakenly shared.
Federal institutions subject to the Privacy Act or businesses subject to the Personal Information Protection and Electronics Document Act (PIPEDA) may report a privacy breach to the Office of the Privacy Commissioner of Canada (OPC), depending on the situation and their obligations under the applicable law.
Our Office only accepts breach reports directly from the organizations subject to the Privacy Act or PIPEDA. However, individuals affected by a breach and wanting to bring concerns about a breach to our attention can contact our Information Centre for more details or visit our Report a Concern page to access information about bringing privacy issues to the OPC’s attention.
For more information about responding to privacy breaches, see our Privacy Breach topic page, which features guidance such as:
- For federal institutions: the Treasury Board’s Guidelines for Privacy Breaches
- For businesses subject to PIPEDA: Key Steps for Organizations in Responding to Privacy Breaches
If you would like to engage with our Office about a privacy breach that has occurred, choose the relevant option below.
Forms and information for businesses subject to PIPEDA wanting to report a breach to the OPC.
Forms and information for Government of Canada institutions subject to the Privacy Act wanting to report a breach to the OPC.
- Date modified: