Valdra/Breach & Incidents

Submit breach reports to the
OPC in under 20 minutes

The OPC breach report requires specific information in a specific format. Our builder pre-fills the form from your incident log data, validates completeness, and exports a submission-ready PDF.

app.valdra.ai/incidents/opc-report-builder
Incident INC-2026-011
OPC Report Builder
CRITICAL
OPC Notification Required In
31:23:11
Hours : Minutes : Seconds
Incident Timeline
1. Incident Detected
2. Investigation Started
3. OPC Notification
4. Parties Notified
OPC ReportDRAFT
Organization: Acme Corp
Date of breach: Apr 12, 2026
Individuals affected: 1069
Data types: Name, SIN, DOB
RROSH assessment: ✓
Built for Canadian businesses
EN + FRBilingual
🍁Hosted in Canada
PIPEDA · Law 25 · CASLBuilt for Canadian law
24 mo

how long PIPEDA requires you to keep a record of every breach — reportable or not

1 PIPEDA Breach of Security Safeguards Regulations

Start Free Assessment
OPC Breach Notification — Draft
47h 23m left
Incident Summary
Unauthorized access to customer database on April 12, 2026. Approximately 1,200 records including names, emails, and account numbers affected.
Records Affected
1,200
Data Types
Name, Email, Account #
Risk Level
Real Risk of Harm
OPC Report
Required

Report as soon as feasible. Start the clock now.

PIPEDA says to report a breach that creates a real risk of significant harm to the OPC as soon as feasible after you determine it has occurred. The law sets no fixed number of hours. Valdra starts your response clock against a recommended 72 hour internal target, which is not a legal deadline, and walks you through every required step.

Request a demo
Affected Party NotificationTemplate · En/Fr

Subject: Important notice about your personal information

Dear [First Name],

We are writing to inform you of a security incident that may have affected your personal information held by [Company].

What happened: On [Date], we discovered that...

Plain language draft · Review before sending
Breach Response Timeline47h 23m to deadline
Breach detected14:02
Contained15:18
RROSH assessed — reportable16:40
OPC notifiedpending
Individuals notifiedpending

Every letter, every document, generated.

OPC notification letters, affected party notifications, and internal incident reports are drafted from your incident data in plain language, ready for your review in minutes, not hours.

Request a demo

Additional features

Request a demo

OPC Form Pre-Fill

Automatically populates the OPC Report of a Privacy Breach form using data already captured in your incident log.

Completeness Validation

Checks all required OPC fields before you submit, flagging missing information that could result in an incomplete filing.

Breach Description Generation

AI drafts the narrative breach description from your incident facts — you review and approve, saving hours of writing time.

Regulatory Submission Package

Produces a complete submission package including the OPC form, RROSH determination, evidence attachments, and cover letter.

Submission Tracking

Log the submission date, OPC reference number, and all correspondence. Tracks the OPC's response timeline and follow-up obligations.

Historical Report Archive

All OPC reports are stored with links to the originating incidents — complete breach history for regulatory due diligence.

Get compliant and build trust

Start free, no credit card.

Start Free — No credit card required

🍁 Canadian data residency · PIPEDA readiness · SOC 2 in progress

Our own compliance

We run our own compliance programme inside Valdra — the product we sell. Our SOC 2, ISO 27001 and ISO 42001 programmes are actively in progress; we do not claim certifications we do not yet hold.

Valdra readiness mark, click to verify
  • PIPEDA
  • Law 25 (Quebec)
  • CASL
  • Data hosted in Canada 🇨🇦
  • AI governance
View our Trust Centre

Measured by Valdra from our own assessments, not audited by a third party. Click the mark to open its verify page and see what it covers.