On September 17, 2018, the Office of the Privacy Commissioner of Canada (OPC) launched a public consultation on a draft guidance paper on complying with the regulatory requirements for managing personal data security breaches. The paper outlines the procedures and controls recommended by the OPC to ensure that organisations subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) may create an effective response plan against personal data breaches in their systems.