So you gave personal info to a company caught in a data breach. Now what?

All kinds of companies in Canada are suffering hacking and data breaches, and some lose private consumer information in the process. What should you do after getting one of those ominous notices that your data has been affected?