2. Overview
What is a privacy breach?
2. Examples of privacy breaches
3. Consequences of privacy breaches
4. Steps to handling a privacy breach

3. 1. What is a Privacy Breach?
A privacy breach occurs when there is unauthorized access, collection, use disclosure or disposal of personal information.

4. 2. Examples of Privacy Breaches
Revealing the name of an applicant on an Access to Information Request
Sending personal information to the wrong:
Fax number
Mailing address
Accessing personal information improperly

5. 2. Examples of Privacy Breaches
Nova Scotia (April 2016)
Spa owner had similar fax number to mental health referral line
Went to CBC after receiving dozens of referral notices containing patient name, phone number and notes on mental health
Records were received over a ten year time period

6. 2. Examples of Privacy Breaches
Eastern Health (March 2016)
Clerk caught snooping in patient files, ‘no longer employed’ at Eastern Health
Fines (2014)
Nurse at Eastern Health fined $1,000 for inappropriately accessing patient files
Accounting Clerk at Western Health fined $5,000 for accessing files

7. 3. Consequences of Privacy Breaches
Less trust in organization
Risk of embarrassment to individuals
Risk of identity theft or financial loss (SIN and Credit Card)

8. 4. How to Handle a Privacy Breach
Step 1 – Contain the Breach
Step 2 – Evaluate the Risks
Step 3 – Notify
Step 4 - Prevent

9. 4. How to Handle a Privacy Breach
Step 1 – Contain the Breach
Take steps to limit the breach
Eg. If you realize you sent an to the wrong person, call the person and ask them to delete it

10. 4. How to Handle a Privacy Breach
Step 2 – Evaluate the Risks
Determine what information was breached and how
What are the risks?
Sensitivity of information
Number of people affected
Risk of identity theft, financial loss

11. 4. How to Handle a Privacy Breach
Step 3 – Notification
Required to notify individuals if there is a risk of significant harm.
Notify ATIPP Office and Privacy Commissioner’s office of any privacy breaches

12. 4. How to Handle a Privacy Breach
Step 4 – Prevent
How can similar breaches be prevented?

13. Contact
For more information contact the ATIPP Office at or toll free at Tel: (877) or
Privacy Breach reporting forms available at: