Today, the Government introduced Bill C-29, an Act intended to update Canada's federal privacy protection statute, PIPEDA.  While the Act introduces much overdue data breach notification requirements, it also adds several gaping holes into what is currently a strong and important consumer privacy protection statute.  This is most problematic in light of the ever-increasing amount of personal information held by private organizations in the digitized world.