Office of the Information and Privacy Commissioner
March 9, 2016

Commissioner Releases Third Quarter Privacy Breach Notification Statistics

During the third quarter of mandatory privacy breach reporting (December 1, 2015 to February 29, 2016) the OIPC received 51 privacy breach reports from 19 public bodies. This is down from the 61 reports from 21 public bodies received in the second quarter of mandatory breach reporting.

Since the last quarter�s statistics were reported, the Office of the Information and Privacy Commissioner has issued a Privacy Bulletin to all municipalities on what constitutes a privacy breach in an effort to support and promote compliance with the ATIPPA, 2015 privacy provisions and to ensure that municipalities, in particular, understand the requirement to forward all privacy breach reports to this Office.

Privacy breach reports to the Commissioner allow the OIPC to advise public bodies about the breach response process and discuss ways to avoid similar breaches. This information is also used by the Commissioner to decide whether to initiate an investigation or an audit, and also to target specific issues or public bodies for privacy training.

Summary by Public Body:
College of the North Atlantic 5
Central Health 3
Department of Advanced Education and Skills 4
Department of Business, Tourism, Culture and Rural Development 1
Department of Child, Youth and Family Services 5
Department of Education and Early Childhood Development 1
Department of Justice and Public Safety 3
Department of Municipal and Intergovernmental Affairs 1
Government Purchasing Agency 1
Human Resource Secretariat 5
Labrador Grenfell Health 1
Newfoundland and Labrador English School District 6
Newfoundland and Labrador Housing Corporation 3
Public Service Commission 1
Service NL 7
Town of Happy Valley-Goose Bay 1
Town of Gander 1
Western Health 1
Workplace Health, Safety and Compensation Commission 1
Summary by Breach Type:
E-mail16
Fax4
In Person5
Intentional1
Mail Out14
Other7
Technical Malfunction2
Telephone2

- 30 -

Media contact:

Ed Ring
Information and Privacy Commissioner
709-729-6309

2016 03 09                              2:45 p.m.