If you have other privacy liability insurance, report to that insurer as well. Most firms have coverage on the Coalition cyber policy and many firms have arranged privacy liability insurance on their own. To report to Coalition, report as you would a cyber claim. To report to other insurers, follow the instructions on your policy documents or contact your broker.
You are also obligated to report privacy breaches to the Law Society. Rule 10-4 (Security of Records) requires you to protect your client’s records from all risks of loss, destruction and unauthorized access. Should a breach occur, you must immediately notify the Executive Director in writing of all the relevant circumstances if you have reason to believe that:
a. you have lost custody or control of any of your records for any reason, b. someone has improperly accessed or copied any of your records, or c. a third party has failed to destroy records completely and permanently despite your instructions.
Rule 10-4 reports can be addressed to the Executive Director c/o Director, Intake, Early Resolution & Practice Standards and sent to professionalconduct@lsbc.org. Contact a Law Society Practice Advisor at 604.669.2533 or practiceadvice@lsbc.org if you have questions regarding your professional responsibilities.