Northwest Territories Information and Privacy Commissioner Andrew Fox said a failure by the territory's Health and Social Services Authority to properly report a data breach involving personal medical information violated the Health Information Act, Yahoo News reports. The commissioner said the department in 2020 disclosed a patient's medical data — including diagnosis and personal identifying information — to the wrong person, but only reported it months later following a patient complaint.
Commissioner: Northwest Territories failed to properly report privacy breach
Related stories
Ireland's DPC details legitimate interest prong of its LinkedIn enforcement action
Notes from the IAPP Europe: Wrapping up November with the IAPP DPC
IAPP DPC 2024: Reynders discusses GDPR enforcement harmonization, adequacy developments
US Senate subcommittee ponders accountability for AI-assisted scams
Tracking evolving policy paradigms in a hallmark year for AI governance