(b) if the anti-money laundering or anti-terrorist financing measures that a foreign state or a foreign entity has implemented are ineffective or insufficient, the risk of money laundering activities or terrorist financing activities being carried out in that foreign state or by means of that foreign entity is significant and, as a result, the Minister is of the opinion that there could be an adverse impact on the integrity of the Canadian financial system or a reputational risk to that system.

(b) the anti-money laundering or anti-terrorist financing measures that a foreign state or a foreign entity has implemented are ineffective or insufficient and, as a result, the Minister is of the opinion that there could be an adverse impact on the integrity of the Canadian financial system or a reputational risk to that system.

the likely consequences of the personal data breach for the subscriber or individual concerned, in particular where the breach could result in identity theft or fraud, physical harm, psychological distress, humiliation or damage to reputation; and

Hon. Julian Fantino (Minister of International Cooperation, CPC): Mr. Speaker, with regard to (a), mitigation actions and measures taken to protect the interests of the Crown when an organization in receipt of the Canadian International Development Agency, CIDA, funding is under legal protection from creditors include conducting an internal, or contracting an external, review and assessment of potential program, legal, fiduciary and political/reputational risks that may arise; alerting the recipient country ministry or partner institution of potential project impacts; reviewing the contractual and performance terms and conditions of th ...[+++]e agreement or agreements signed; based on the assessment and severity of the financial situation, developing a risk mitigation and monitoring plan, usually in consultation with the organization or service provider and their lenders, as well as the recipient country ministry or partner institution, if required; obtaining financial statements, forecasts and operational plans from the organization or service provider to closely monitor and track progress in addressing the situation and returning to normal business operations; ensuring that all advance payments are secured by means of irrevocable bank guarantees issued by acceptable financial institutions and that any financial performance guarantees are enforceable, in case of need; and not entering into any new agreements until such time as the organization or service provider has demonstrated their financial capacity, returned to normal business operations and is no longer under the protection of the courts.

This is another step to increase our due diligence, reduce the opportunity for fraud, and better manage the reputational risk to the procurement and real property system.

Bill C-12 requires organizations to notify individuals in cases where a breach poses a real risk of significant harm, such as identity theft or fraud or damage to reputation.