3.6. For the purposes of this Act, “confidentiality incident” means1° access not authorized by law to personal information;
2° use not authorized by law of personal information;
3° communication not authorized by law of personal information; or
4° loss of personal information or any other breach of the protection of such information.