Search

Displaying 1 - 20 of 102

Ensuring secure disposal of health records: Out of sight is not out of mind!

Ensuring secure disposal of health records: Out of sight is not out of mind! … Case of Note:  PHIPA Decision 266 Background A complaint was brought to the Information and Privacy Commissioner of Ontario (IPC) alleging that a health clinic had failed to securely dispose of records of personal health …

Resource

- Published on February 10, 2025

S4-Episode 10: Lessons in health privacy: Key takeaways from 2024

S4-Episode 10: Lessons in health privacy: Key takeaways from 2024 … In this episode, Commissioner Patricia Kosseim delves into significant health privacy cases of 2024 with her colleagues from the IPC. The conversation highlights challenges, practical takeaways, and lessons learned from recent …

Multimedia

- Published on December 30, 2024

Joint Investigation into LifeLabs Data Breach

Joint Investigation into LifeLabs Data Breach … The joint investigation report concerning the 2019 cyberattack on LifeLabs’ computer systems was completed in June 2020. The Ontario Court of Appeal recently dismissed LifeLabs’ bid to block public release of the report. … Joint Investigation into …

Resource

- Published on November 25, 2024

Reported Breach HR23-00282

Reported Breach HR23-00282 … A prescribed person under the Personal Health Information Protection Act reported a breach to the IPC regarding a cyberattack that involved the unauthorized copying of approximately 3.4 million individuals’ personal health information from the prescribed person’s secure …

Resource

- Published on August 14, 2024

Ensuring health data privacy: Insights from the UTOPIAN case

Ensuring health data privacy: Insights from the UTOPIAN case … Health information research plays a vital role in improving medical treatments and the quality of care. To conduct health research, researchers require access to personal health information, the collection and use of which is regulated …

Resource

- Published on July 18, 2024

Ransomware reality: Case study in health care cybersecurity and recovery

Ransomware reality: Case study in health care cybersecurity and recovery … Unfortunately, ransomware attacks are not an uncommon occurrence, especially in this era of rapidly advancing technologies. Bad actors use ransomware attacks to extract money and cause harm to others. As these types of …

Resource

- Published on July 18, 2024

Manual for the Review and Approval of Prescribed Persons and Prescribed Entities

Manual for the Review and Approval of Prescribed Persons and Prescribed Entities … The Manual for the Review and Approval of Prescribed Persons and Prescribed Entities outlines the process followed by the Information and Privacy Commissioner of Ontario in reviewing the practices and procedures …

Resource

- Published on January 19, 2024

Submission for the Five-Year Review of the Police Record Checks Reform Act, 2015

Submission for the Five-Year Review of the Police Record Checks Reform Act, 2015 … On September 11, 2023, the IPC provided a submission to the Ministry of the Solicitor General as part of the Five-Year Review of the  Police Record Checks Reform Act, 2015 . The submission includes eight …

Resource

- Published on September 12, 2023

Notice of change to PHIPA Practice Direction #3

Notice of change to PHIPA Practice Direction #3 … Document Updated: A change to PHIPA Practice Direction #3 took effect on October 10, 2023. Learn more As of  October 10, 2023 , the IPC may publish PHIPA decisions at any stage of dispute resolution, including early resolution, investigation, and …

Resource

- Published on September 6, 2023

Comments on Bill 60, Your Health Act, 2023

Comments on Bill 60, Your Health Act, 2023 … This letter to Goldie Ghamari, Chair of the Standing Committee on Social Policy, was intended to present the IPC’s views on how amendments to Bill 60 can better enhance transparency and privacy protections of Ontarians’ information with respect to the …

Resource

- Published on March 28, 2023