Search

Displaying 221 - 240 of 6830

Ensuring health data privacy: Insights from the UTOPIAN case

Ensuring health data privacy: Insights from the UTOPIAN case … Case of Note: PHIPA Decision 243   Introduction Health information research plays a vital role in improving medical treatments and the quality of care. To conduct health research, researchers require access to personal health …

Basic page

- Published on July 29, 2024

IPC comments on Bill 188, the Supporting Children's Futures Act

IPC comments on Bill 188, the Supporting Children's Futures Act … The IPC made recommendations to the Standing Committee on Social Policy in relation to proposed amendments to the Child, Youth and Family Services Act. It is the IPC’s position that any changes related to the collection, use and …

Resource

- Published on May 17, 2024

PHIPA DECISION 253

PHIPA DECISION 253 … In December 2022, the respondent the Hospital for Sick Children (the hospital) was the subject of a ransomware attack. The attack resulted in the encryption of numerous hospital servers, including those containing personal health information. However, the hospital’s …

Decisions

- Published on July 26, 2024

PHIPA DECISION 254

PHIPA DECISION 254 … In June 2021, the respondent Kingston, Frontenac and Lennox & Addington Public Health (KFL&A) was the subject of a ransomware attack. The attack resulted in the encryption of multiple KFL&A servers, including those containing personal health information. The IPC initiated a …

Decisions

- Published on July 26, 2024

PHIPA DECISION 255

PHIPA DECISION 255 … In July 2022, the respondent Simcoe Muskoka District Health Unit (SMDHU) was the subject of an email phishing attack. As a result of the attack, a threat actor gained access to one SMDHU email account containing approximately 20,000 emails, including about 1,000 emails …

Decisions

- Published on July 26, 2024

PHIPA DECISION 256

PHIPA DECISION 256 … An individual asked the appointed guardian of her late doctor’s medical records (the custodian) for access to her complete medical records. While the custodian originally claimed he found the individual’s medical records, he later said he did not find any. In this interim …

Decisions

- Published on July 26, 2024

CYFSA Decision 19

CYFSA Decision 19 … In February 2022, the respondent Halton Children’s Aid Society (CAS) was the subject of a ransomware attack. While the CAS’s investigation did not find any evidence that the threat actor had accessed or exfiltrated any data stored in the CAS’s environment, it found that the …

Decisions

- Published on July 25, 2024

MO-4541

MO-4541 … The appellant sought access to records related to investigations conducted by the Thunder Bay Police Services Board (the board). The board withheld some of the responsive records pursuant to the law enforcement and personal privacy exemptions, and the labour relations exclusion, in the …

Decisions

- Published on July 25, 2024

MO-4542

MO-4542 … The appellant made a request under the Act to the Halton Regional Police Services Board (the police) for records revealing inquiries made about him by all police services across Canada on several identified law enforcement databases. The police took the position that they do not have …

Decisions

- Published on July 25, 2024

MO-4543

MO-4543 … The City of Kawartha Lakes (the city) received a request under the Act for all city expenses over $1,000 over three and a half years. The city determined that it had reasonable grounds to consider the request as frivolous or vexatious under section 4(1)(b) of the Act. In this order, the …

Decisions

- Published on July 25, 2024

MO-4544

MO-4544 … The township received a request under the Act, in part, for a report that was discussed at a closed session of the township council. The township relied on section 6(1)(b) of the Act to deny access to the report on the basis that it revealed the substance of deliberations of the closed …

Decisions

- Published on July 25, 2024

MO-4545

MO-4545 … The Toronto Transit Commission (the TTC) received a multi-part request under the Act for records relating to its investigation into the requester’s complaint and to information about transit fare enforcement and revenue. The TTC granted partial access to responsive records, withholding …

Decisions

- Published on July 25, 2024

PO-4527

PO-4527 … The appellant sought access from the WSIB to records relating to his claims. The WSIB granted partial access, withholding information from one of 17 responsive records because it contains another individual’s personal information. The appellant challenges the WSIB’s claim that the …

Decisions

- Published on July 25, 2024

Interpretation Bulletin: Economic and Other Related Interests

Interpretation Bulletin: Economic and Other Related Interests … This interpretation bulletin outlines the factors for determining whether the economic and other related interests exemption applies to a record, as set out in section 18(1) of the Freedom of Information and Protection of Privacy Act …

Resource

- Published on April 30, 2024

Ransomware reality: Case study in health care cybersecurity and recovery

Ransomware reality: Case study in health care cybersecurity and recovery … Case of Note: PHIPA Decision 249 Introduction Unfortunately, ransomware attacks are not an uncommon occurrence, especially in this era of rapidly advancing technologies. Bad actors use ransomware attacks to extract money and …

Basic page

- Published on July 18, 2024

MO-4537

MO-4537 … The appellant requested records relating to criminal investigations he was involved in from the police. The police decided to grant access to some of the records, but withheld information pursuant to the personal privacy exemption in section 38(b). In this order, the adjudicator upholds …

Decisions

- Published on July 16, 2024