Overview What is a privacy breach? 2. Examples of privacy breaches 3. Consequences of privacy breaches 4. Steps to handling a privacy breach

1. What is a Privacy Breach? A privacy breach occurs when there is unauthorized access, collection, use disclosure or disposal of personal information.

2. Examples of Privacy Breaches Revealing the name of an applicant on an Access to Information Request Sending personal information to the wrong: Fax number Mailing address Email Accessing personal information improperly

2. Examples of Privacy Breaches Nova Scotia (April 2016) Spa owner had similar fax number to mental health referral line Went to CBC after receiving dozens of referral notices containing patient name, phone number and notes on mental health Records were received over a ten year time period

2. Examples of Privacy Breaches Eastern Health (March 2016) Clerk caught snooping in patient files, ‘no longer employed’ at Eastern Health Fines (2014) Nurse at Eastern Health fined $1,000 for inappropriately accessing patient files Accounting Clerk at Western Health fined $5,000 for accessing files

3. Consequences of Privacy Breaches Less trust in organization Risk of embarrassment to individuals Risk of identity theft or financial loss (SIN and Credit Card)

4. How to Handle a Privacy Breach Step 1 – Contain the Breach Step 2 – Evaluate the Risks Step 3 – Notify Step 4 - Prevent

4. How to Handle a Privacy Breach Step 1 – Contain the Breach Take steps to limit the breach Eg. If you realize you sent an email to the wrong person, call the person and ask them to delete it

4. How to Handle a Privacy Breach Step 2 – Evaluate the Risks Determine what information was breached and how What are the risks? Sensitivity of information Number of people affected Risk of identity theft, financial loss

4. How to Handle a Privacy Breach Step 3 – Notification Required to notify individuals if there is a risk of significant harm. Notify ATIPP Office and Privacy Commissioner’s office of any privacy breaches

4. How to Handle a Privacy Breach Step 4 – Prevent How can similar breaches be prevented?

Contact For more information contact the ATIPP Office at 729-7073 or toll free at Tel: (877) 895-8891 or email atippoffice@gov.nl.ca Privacy Breach reporting forms available at: http://www.oipc.nl.ca/pdfs/PrivacyBreachIncidentReportForm.pdf