Private member's bill in Ontario calls for security breach notification

Ontario MPP Tony Ruprecht has introduced a private member's bill (Bill 38) in the provincial parliament calling for security breach notification. The bill is an amendment to the Consumer Protection Act and includes the following provision:

"7. The Act is amended by adding the following section:

Duty to inform consumer of unlawful disclosure

12.1 (1) Every consumer reporting agency shall, immediately on discovering that any of a consumer's information has been unlawfully disclosed, lost or stolen, disclose such discovery to the consumer.

Same, person to whom consumer report provided

(2) Every person supplied with a consumer report by a consumer reporting agency shall, immediately on discovering that any of the consumer's information has been unlawfully disclosed, lost or stolen while the information was in the possession or under the control of the person, disclose such discovery to the consumer. "

Similar bills have been introduced and never passed, but it may be something that will eventually get some traction.