Northwest Territories Information and Privacy Commissioner Andrew Fox said a failure by the territory's Health and Social Services Authority to properly report a data breach involving personal medical information violated the Health Information Act, Yahoo News reports. The commissioner said the department in 2020 disclosed a patient's medical data — including diagnosis and personal identifying information — to the wrong person, but only reported it months later following a patient complaint.