Office of the Information and Privacy Commissioner
June 24, 2016

Office of the Information and Privacy Commissioner - Audit Report Released

The Information and Privacy Commissioner, Ed Ring, has released his first Audit Report under authority of the Access to Information and Protection of Privacy Act, 2015 (ATIPPA, 2015).

This first audit report examines the reasonableness of the physical safeguards in place within the Human Resource Secretariat's (HRS) Pensions Administration and Group Insurance Division (Division). The audit started with background research and included formal submissions, a site tour and staff surveys. The final report outlines legislative requirements, presents findings from the audit, and discusses key observations and recommendations.

"Audits present opportunities for both the OIPC and public bodies," says Commissioner Ring. "For my Office, it identifies areas that may benefit from additional guidance or practice bulletins. For public bodies, it provides an opportunity to identify and address privacy risks before breaches occur. I was pleased with the level of cooperation provided by the Division and want to recognize that it proactively addressed some gaps, even prior to the release of the recommendations in the report."

To view the Report in its entirety, please go to www.oipc.nl.ca/public/advocacy-compliance/auditing

- 30 -

Media contact:

Ed Ring Information and Privacy Commissioner 709-729-6309

2016 06 24                              2:55 p.m.