3.6. For the purposes of this Act, “confidentiality incident” means(1) access not authorized by law to personal information;
(2) use not authorized by law of personal information;
(3) communication not authorized by law of personal information; or
(4) loss of personal information or any other breach of the protection of such information.