The Canadian Privacy Commissioner recently issued a report recommending that Equifax Canada “identify Canadians’ personal information that should no longer be retained by Equifax Inc. according to its retention schedule and delete it,” then give a third-party security assessment and audit to the Canadian government every two years for the next six years.
Separately, Yahoo’s $117.5 million proposed class-action settlement includes a section on “business practice changes” for Verizon, which bought Yahoo in 2017.