A pharmacy's electronic dispensing system experiences a data breach exposing patient medication records. What is the pharmacy's primary documentation obligation?
-
A
Internally note the breach but take no further action
-
B
Document the breach details and notify affected individuals and the Privacy Commissioner as required under PIPEDA breach notification rules
-
C
Delete all records to prevent further exposure
-
D
Only notify patients if they specifically request information about the breach