Computer hacker wearing glasses and using a computer in a dark room
© Getty Images

Data Compromise coverage

Helping businesses respond to a data breach

    alt txt



    The Digital Privacy Act (Bill S-4) makes it mandatory for all organizations (non-profits included), to report data breaches to affected individuals and the Office of the Privacy Commissioner of Canada.

    HSB has designed Data Compromise coverage to help businesses respond to the financial burden and service expectations of a data breach.

    Businesses should be able to notify all parties affected by a breach, effectively communicate the scope of the possible damage, and provide fraud alert assistance and identity restoration case management to those affected by the breach.

    Fingerprint biometric authentication button
    © Getty Images
    Businesses and institutions have a responsibility to safeguard the data of clients, employees and others.

    Small to mid-sized companies are vulnerable to data breaches by computer hackers, thieves and dishonest employees, or data can be lost through an accidental or inadvertent release. Yet many businesses lack the resources to respond effectively.

    Hacker attack and data breach, information leak concept, futuristic cyber background with broken lock
    © Getty Images
    The damage to a company’s sales and reputation depends on the actions it takes in response to a data breach.

    Data Compromise coverage helps small to mid-sized businesses investigate a data breach, notify affected individuals, and provide fraud alerts, case management, and other services that help prevent identity theft, and fraud following a breach of personal identifying information.

    What is covered?

    Legal review for notifying those affected by the breach
    Forensic IT help to determine the extent of the breach and who was affected
    Preparation and production of notification letters to affected individuals
    Notification of the data breach to the Office of the Privacy Commissioner of Canada and regulatory authorities
    Fraud alert for persons affected by the loss of personal information
    Identity restoration case management for identity theft victims
    Public relations services to help respond to the potential impact of the breach on business relations