Privacy by Design: The Origin of a Global Standard

When I was first appointed Information and Privacy Commissioner of Ontario in 1997, I was struck by the limitations of the existing system. Privacy infractions were addressed only after the fact: a law would be broken, a complaint would be filed, and my office would investigate. Lawyers and regulators would expend enormous energy repairing damage that had already been done, while individuals who had suffered the breach were left with remedies that rarely felt sufficient.