The Office of the Privacy Commissioner of Canada (OPC) recently issued PIPEDA Findings #2022¬004, which underscores the need for a timely risk assessment that includes Canadians’ personal information. With this Report, the OPC is setting the expectation that while this timeline is flexible, it is not infinitely elastic.