Mishandling employees’ personal information – Parole Board of Canada
The complainant alleged that the Parole Board of Canada (PBC) contravened the Privacy Act by disclosing her medical information to external parties involved in a Public Service Staffing Tribunal (PSST) hearing. The PBC acknowledged that a human resources employee inadvertently emailed documents containing the complainant's medical information, which was outside the scope of the PSST's order. The PBC apologized to the complainant, ensured the recipients disposed of the information, and reported the breach internally.
- Was the complainant's medical information disclosed without consent or lawful authority?
- Did the disclosure contravene the Privacy Act's provisions on disclosure of personal information?
- Were the corrective actions taken by the PBC satisfactory?
Complaint well-founded
The investigation established that the complainant's medical information was disclosed without her consent and not in accordance with any of the permitted disclosure provisions under subsection 8(2) of the Privacy Act, thus contravening the Act. The OPC was satisfied with the corrective measures taken by the PBC.
AI-generated summary for reference only. Always verify against the official decision ↗
The Parole Board of Canada apologized to the complainant, ensured the recipient disposed of the information, and reported the breach internally.
- s.3 Privacy Act
- s.8(1) Privacy Act
- s.8(2) Privacy Act
This summary is informational only and not legal advice.