What will we do if your information is compromised
We are proud of the policies and practices we use to protect your personal information. We also believe that you have the right to know how your personal information is being collected, used and disclosed. That is why we have developed procedures to restore the integrity of your personal information if the policies and practices we use to safeguard your personal information are breached.
Our procedures to respond to security breaches include breach notification. We will notify you, as soon as reasonably practicable in the circumstances, of any security breaches of your personal information, and what it might mean to you.
We will consider the sensitivity of the personal information that is involved and the probability that the personal information has been, is being or will be misused. If the breach creates a real risk of significant harm to you, such as the potential for financial loss, identity theft or negative effects on your credit, we will notify you of the breach as soon as we can. We will ensure that you have enough information to take whatever steps are possible to reduce the risk of the harm that could result from the breach.
Second, if there has been a material breach of the security of your personal information (determined by a number of factors, including the sensitivity of the personal information and the number of individuals whose personal information was involved), we will also notify the Office of the Privacy Commissioner of Canada and the applicable provincial information and privacy commissioner and/or ombudsman as appropriate.
Third, we will investigate whether any other government institutions may be able to help us reduce the risk of harm from the breach. If so, we may notify those institutions, so that they can help us respond to the breach.
In all cases, we will strive to make our notifications as soon as we confirm the breach has occurred, and that notification is required, in a manner which is consistent with applicable laws.