{"id":1331,"slug":"pipeda-100k-per-violation-penalty","title":"PIPEDA penalties — up to CAD $100,000 per violation for knowingly failing to report, notify, or maintain breach records; OPC can refer to AG","kind":"reference","scope":"business","status":"current","audiences":["kevin","smb-owner","candid-team"],"topics":["regulatory-compliance","privacy-pipeda"],"reference_body":"**Claim:** Under PIPEDA, knowingly failing to report a breach, notify affected individuals, or maintain breach records is an offence carrying fines **up to CAD $100,000 per violation** (potentially applied per individual not notified). The OPC can refer matters to the **Attorney General of Canada**.\n\n**Source:** gdprlocal.com ; cybersecuritycanada.ca ; priv.gc.ca\n\n**Confidence:** Verified.\n\n**Why this matters for Candid:** Real dollar exposure that lives in the *operations* column, not the legal-letter column. For most SMBs, single recurring violations are far more likely than a single catastrophic breach — making the 24-month records discipline ([[pipeda-breach-reporting-rrosh-24-month-records]]) the practical priority.","rationale_body":null,"metadata":null,"links":{"outgoing":[{"slug":"pipeda-breach-reporting-rrosh-24-month-records","title":"PIPEDA mandatory breach reporting (in force Nov 1, 2018): report RROSH breaches to OPC + notify affected individuals + KEEP RECORDS OF ALL BREACHES for 24 months","kind":"reference","scope":"business","link_type":"depends-on"}],"incoming":[{"slug":"research-brief-client-portals-smb-june-2026","title":"Research brief: client portals for SMBs — the honest case (June 2026)","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"rule-treat-data-custody-as-line-item","title":"R4 — Treat data custody as a project line item, not a footnote: PIPEDA consent + MFA + encryption + breach response plan + 24-month breach records all live in scope before launch","kind":"rule","scope":"business","link_type":"depends-on"}]},"created_at":"2026-06-20T17:57:32.189Z","updated_at":"2026-06-20T17:57:32.189Z"}