Your complete breach history,
always audit-ready
PIPEDA requires organizations to maintain a breach register for a minimum of 24 months. Ours captures every incident automatically, with all evidence linked and export-ready for OPC review.
how long PIPEDA requires you to keep a record of every breach — reportable or not
1 PIPEDA Breach of Security Safeguards Regulations
Start Free AssessmentReport as soon as feasible. Start the clock now.
PIPEDA says to report a breach that creates a real risk of significant harm to the OPC as soon as feasible after you determine it has occurred. The law sets no fixed number of hours. Valdra starts your response clock against a recommended 72 hour internal target, which is not a legal deadline, and walks you through every required step.
Request a demoSubject: Important notice about your personal information
Dear [First Name],
We are writing to inform you of a security incident that may have affected your personal information held by [Company].
What happened: On [Date], we discovered that...
Every letter, every document, generated.
OPC notification letters, affected party notifications, and internal incident reports are drafted from your incident data in plain language, ready for your review in minutes, not hours.
Request a demoAdditional features
Request a demoAutomatic Breach Logging
Every incident opened in Valdra is automatically added to your breach register with all required PIPEDA fields populated.
24-Month Retention
Enforces the mandatory 24-month retention period for breach records. Alerts you before any record is eligible for destruction.
Required Field Coverage
Captures all PIPEDA breach register requirements: description, date, data types, individuals affected, RROSH assessment, notification actions.
OPC Inspection Export
Export your complete register in OPC-requested format with a single click — formatted for regulatory inspection or litigation discovery.
Status Tracking
Real-time status for each breach: investigation, notified, closed. Filter by date range, severity, regulation, or notification status.
Access Controls
Restrict breach register access to authorized users only. Full audit log of who accessed which records and when.
Learn more about Valdra
Get compliant and build trust
Start free, no credit card.
🍁 Canadian data residency · PIPEDA readiness · SOC 2 in progress
