The kind of thing I don’t like to receive but is now all too common!
“Dear Stephane Hamel:
We are writing to inform you of an incident that involved some of your personal information.”
This time around, it is Uhaul Moving and Storage
"... our investigation determined on September 7, 2022, the accessed personal information includes your name and one or more of the following: address, telephone number, date of birth, email address and driver’s license number.”
What about:
—Data minimization? Did they really need all this info for a truck rental (honestly, probably yes);
—Data expiration? Why did they keep DoB and driver’s license beyond the time of rental?
—Delay of disclosure of breach: it was first detected on August 1st, investigation took until Sept. 7, and I just received the email notification
—Remedy: they now offer 1 year of Equifax Canada service—I already got it since my personal data was leaked from Desjardins (financial institution) a couple of years ago. . .
#dataprivacy #databreach #datagovernance #personalinformation