One of the requirements in the Access to Information and Protection of Privacy Act, 2015 (ATIPPA, 2015) is that public bodies must report any and all privacy breaches to our Office.
A privacy breach under ATIPPA, 2015 generally occurs when personal information is in a public body’s custody or control and:
- the public body loses the personal information;
- the public body discloses the personal information to an unauthorized person;
- an unauthorized person accesses the personal information;
- someone steals the personal information; or
- the public body disposes of the personal information contrary to the law.
To report a privacy breach to our Office, please complete the Privacy Breach Reporting Form and send it to breachreport@oipc.nl.ca. For more information on how to complete the form, please see our Guidelines for Completing the Privacy Breach Reporting Form.