Measures contemplated or being taken to prevent a recurrence (e.g. training, new policies or procedures) Additional information: Context Type of personal information Name Employee identification Biographical information Employee personnel information Biometric information Financial information Citizenship status Medical information Contact information Physical attributes Credit information Place of birth Criminal checks/history Place of death Date of birth Signature Date of death Social Insurance Number Educational information Other identification numbers Employment equity information Other: Sensitivity of the information (If unsure, consult Security) Protected A Protected B Protected C (Low sensitive injury) (Particularly sensitive (Extremely sensitive – – injury) life threatening and/or extremely grave injury) Format of the information Paper (mail, sensitive waste, etc.) Electronic (email, website, database, laptop, tablet, USB key, CD-ROM, etc.) Other Security measures in place at the time of the breach Technical (encryption, password, etc.) Physical (locks, alarm systems, etc.) Organizational (security clearances, policies, training, contractual provisions, etc.)
Measures contemplated or being taken to prevent a recurrence (e.g. training, new policies or procedures) Additional information: Context Type of personal information Name Biographical information Biometric information Citizenship status Contact information Credit information Criminal checks/history Date of birth Date of death Educational information Employment equity information Employee identification Employee personnel information Financial information Medical information Physical attributes Place of birth Place of death Signature Social Insurance Number Other identification numbers Other: Sensitivity of the information (If unsure, consult Security) Protected A (Low sensitive – injury) Protected B (Particularly sensitive injury) Protected C (Extremely sensitive – life threatening and/or extremely grave injury) Format of the information Paper (mail, sensitive waste, etc.) Electronic (email, website, database, laptop, tablet, USB key, CD-ROM, etc.) Other Security measures in place at the time of the breach Technical (encryption, password, etc.) Physical (locks, alarm systems, etc.) Organizational (security clearances, policies, training, contractual provisions, etc.)
3-EN-Privacy_breach_report_and_risk_assessment.docx