Where an Organization's Practices Lead to a Breach of Privacy

Multiple Choice

Where an organization's practices lead to a breach of privacy or security under the PIPEDA,the organization

A) must immediately notify an affected individual.
B) must immediately notify the Privacy Commissioner.
C) must notify an affected individual within a reasonable amount of time of the breach.
D) need not notify the affected individual unless the information is extremely sensitive.
E) need not notify the affected individual at all.