Failure to Report breach of Personal Information - MGM Resorts
- Privacy Law In Canada
- May 19, 2022
- 1 min read
PIPEDA Findings #2022-004 19 May 2022
In February 2020, the Office of the Privacy Commissioner of Canada (the “OPC”) became aware of media reports regarding a large-scale data breach MGM Resorts suffered in 2019. Not having received a breach report on the matter, the OPC engaged with MGM to obtain additional information about the breach and the involvement of any personal information belonging to Canadians. After receiving confirmation that Canadian personal information was affected by the breach, considering the potential impact on Canadians who were affected but had not yet been notified of the breach, and considering the significant passage of time since MGM’s confirmation of the breach, the Commissioner initiated a complaint to investigate.
Want to read more?
Subscribe to privacylawcanada.com to keep reading this exclusive post.
