Privacy Breach Response Policy

EZtoFind.ca is committed to protecting personal information collected under the BC Personal Information Protection Act (PIPA). This policy outlines the steps we will take in the event of a privacy breach.

What constitutes a breach

A privacy breach means the unauthorized access, collection, use, disclosure, disposal, or loss of personal information. Examples: a database misconfiguration exposing lead information, unauthorized access to admin systems, phishing that compromises an account, or loss of a device containing personal information.

Response steps

Step 1 — Contain (immediate): Isolate affected systems, revoke exposed credentials, stop the ongoing loss.

Step 2 — Assess (within 24 hours): Determine scope: what data, how many individuals, what risk of significant harm.

Step 3 — Notify (within 72 hours if significant harm is reasonably possible): Notify the Office of the Information and Privacy Commissioner for BC (OIPC) at privacyhelp@oipc.bc.ca and each affected individual, describing what happened, what data was involved, and what steps we are taking.

Step 4 — Remediate: Fix the root cause, update controls, document lessons learned.

Step 5 — Record: All breaches are logged internally with description, affected records, and remediation steps, retained for 3 years.

Privacy Officer

Doug LeMaire, REALTOR® — Fraser Property Management Realty Services Ltd. — info@eztofind.ca. Report a suspected breach anytime, including outside business hours.