A new federal privacy bill gives corporations “subjective” leeway in deciding when and where to divulge breaches of clients’ information, analysts say. Bill S-4 is the largest rewrite of federal privacy law since 2001: “This has been a long, long time coming”.