Trend Analysis by Fiscal Year
Privacy Breach Management Tools
Data Element	Total for Each Data Element	
	First Quarter
(April 1 to June 30)	Second Quarter
(July 1 to September 30)	Third Quarter
(October 1 to December 31)	Fourth Quarter
(January 1 to March 31)	
Details on Circumstances of Privacy Breach	
Program area 					
Physical location of breach					
Containment strategy used					
Information / court evidence					
Recovery of information					
Details of Privacy Breach	
Format of the records					
What personal information was involved (name, tombstone data, etc.)?					
Financial information (SIN, personal financial information, etc.)					
Health information (medical records, psycho-social records, etc.)					
Scope of the disclosure					
Circumstances of the release					
Details on Affected Individuals	
Number of affected individuals					
Do the parties know each other?					
Notification (Identify the Stakeholders Involved)	
Internal stakeholders 					
External stakeholders 					
Affected individuals					
Corrective Measures	
Preventive action taken (e.g., provision of training)					
Remedial action taken (changes to business lines, inclusion of audit trails, implementing encryptions, etc.)					
Corrective measures taken (regarding individual(s) responsible for the breach)					
ATIP Involvement	
Notification to the Office of the Privacy Commissioner and the Treasury Board of Canada Secretariat					
File status