Office of the Information and Privacy Commissioner
December 9, 2015

Commissioner Releases Second Quarterly Privacy Breach Notification Statistics

During the second quarter (September 1 to November 30, 2015) the OIPC received 61 privacy breach reports from 21 public bodies. This is up from the 44 reports from 16 public bodies received in the first quarter of mandatory breach reporting.

Since the last quarter's statistics were reported, the Office of the Information and Privacy Commissioner has provided training to some public bodies on what constitutes a privacy breach in an effort to support and promote compliance with the ATIPPA, 2015 privacy provisions and to ensure that all public bodies understand the requirement to forward all privacy breach reports to this Office.

Privacy breach reports to the Commissioner allow the OIPC to advise public bodies about the breach response process and discuss ways to avoid similar breaches. This information is also used by the Commissioner to decide whether to initiate an investigation or an audit, and also to target specific issues or public bodies for privacy training.

While many reported privacy breaches are relatively minor in nature, trends and patterns in breach reports can reveal more serious systemic issues over time. For that reason, the Commissioner continues to emphasize that all privacy breaches must be reported regardless of how minor they may appear at first.

September 1 to November 30, 2015, by Public Body:

College of the North Atlantic7
Department of Advanced Education and Skills13
Department of Child, Youth and Family Services7
Department of Environment and Conservation1
Department of Justice and Public Safety3
Department of Municipal and Intergovernmental Affairs1
Department of Natural Resources1
Department of Transportation and Works1
Eastern Health1
Forestry and Agrifoods Agency1
House of Assembly1
Human Resource Secretariat3
Human Rights Commission1
Memorial University of Newfoundland1
Newfoundland and Labrador English School District1
Newfoundland and Labrador Housing Corporation5
Office of the Public Trustee1
Service NL4
Western Health1
Workplace Health, Safety and Compensation Commission3
Workplace Health, Safety and Compensation Review Division4

Summary by Breach Type:

E-mail22
Fax2
In Person8
Mail Out22
Other6
Telephone1

- 30 -

Media contact:

Ed Ring
Information and Privacy Commissioner
709-729-6309

2015 12 09                              2:25 p.m.