Privacy Report of Findings RROSH Foreign companies should assess breach impact on Canadians as part of their initial assessment By Kirsten Thompson and Jaime Cardy