Incident Response Plan
Last updated: 10 June, 2026
At Canadian Standard Typing Certificates, protecting your personal information is a responsibility we take seriously. This page explains how we prepare for, respond to, and notify you about data breaches that may affect your personal information.
What is a data breach
A data breach happens when personal information we hold is lost, accessed, used, or disclosed without authorisation. Examples include unauthorised access to our systems, accidental disclosure of personal information, or the loss of a record containing personal information.
How we protect your information
We maintain technical and organisational safeguards designed to reduce the risk of a breach. These include encryption of data in transit and at rest, role-based access controls, secure cloud hosting, and regular review of our security practices. You can read more in our Privacy Policy.
What we do if a breach occurs
We maintain a Data Breach Notification and Incident Response Plan that guides our response. If we become aware of an actual or suspected breach, we will:
Act quickly to contain the breach and limit any further access or disclosure.
Investigate to understand what happened, what information was involved, and who may be affected.
Assess the likely risk of harm to affected individuals.
Take steps to remediate the breach and reduce the chance of it happening again.
Notify affected individuals and the relevant authorities where we are required to do so.
How and when we will notify you
We are subject to the breach of security safeguards provisions of the Personal Information Protection and Electronic Documents Act (PIPEDA). If a breach creates a real risk of significant harm to affected individuals, we will notify those individuals and report the breach to the Office of the Privacy Commissioner of Canada as soon as feasible, and we will keep a record of the breach as required. If you are a resident of Quebec, we will also act in accordance with the Act Respecting the Protection of Personal Information in the Private Sector (Law 25), including notifying the Commission d'acces a l'information and affected individuals where a confidentiality incident presents a risk of serious injury.
What you can do
If you believe your personal information may have been affected by a breach, or you have any concern about how your information is handled, please contact us using the details below. You also have the right to make a complaint to the Office of the Privacy Commissioner of Canada. If you are a resident of Quebec, you may also contact the Commission d'acces a l'information.
Contact us
Email: info@canadianstandardtypingcertificates.com
Privacy Officer: info@canadianstandardtypingcertificates.com
Company: Canadian Standard Typing Certificates
The detailed operational version of our Incident Response Plan is maintained internally and is not published, as it contains security-sensitive information. This page summarises the commitments most relevant to you.