WHSCC Response to Breach Deemed Appropriate
DATA LOSSApril 2, 2010
Newfoundland and Labrador Information and Privacy Commissioner Ed Ring has found that the Workplace Health Safety and Compensation Commission (WHSCC) took appropriate measures in the wake of a 2008 breach involving the exposure of clients' personal information through an online file-sharing service, VOCM reports. According to the Office of the Information and Privacy Commissioner (OIPC) report, immediately following notification of the breach, the WHSCC worked to contain it, recover the records, determine the extent of the exposure and notify those affected by the incident. The OIPC also concluded that, prior to the breach, the WHSCC "made reasonable security arrangements" under the Access to Information and Protection of Privacy Act "to protect the personal information of its clients against foreseeable risks."