Cybersecurity
Cybersecurity refers to the measures a business uses to protect its computer systems, networks and data from unauthorized access, theft or damage, such as access controls, encryption, backups, staff training and incident response plans. It is a technical and risk management term; the legal requirements come mainly from privacy law and from contracts.
How BC law treats it
Private organizations in BC must make reasonable security arrangements to protect personal information in their custody or control (Personal Information Protection Act, SBC 2003, c 63, s. 34). FOIPPA governs public bodies, although service providers to public bodies may be bound by it through their contracts.
What it means for your business
A business should match its security measures to the sensitivity of the information it holds and document what it does.
Risks and common mistakes
Weak security that leads to a breach can be found to fall short of the reasonable security standard, exposing the business to investigation and claims.
For the full explanation, see our entry on Privacy breach.
General information about British Columbia and Canadian law, current to October 2026. It is not legal advice.
