Privacy commissioners in B.C., Ontario order LifeLabs to improve security

Privacy commissioners in B.C., Ontario order LifeLabs to improve security

Privacy commissioners in B.C., Ontario order LifeLabs to improve security

VICTORIA — One of Canada’s largest medical services companies failed to put in place reasonable safeguards to protect the personal health information of millions of Canadians, say the privacy commissioners in B.C. and Ontario.

LifeLabs revealed last November that hackers gained access to the personal information of up to 15 million customers, almost all in Ontario and B.C., and that the company paid a ransom to retrieve and secure the data.

The breach was determined to have affected millions of Canadians and the privacy commissioners announced their joint investigation in mid-December.

A statement released Thursday by the commissioners says the breach last year broke Ontario’s health privacy law and B.C.’s personal information protection law.

The joint investigation found LifeLabs collected more personal health information than was necessary, failed to protect that data in its electronic systems and relied on inadequate information technology security policies.

B.C.’s privacy commissioner and health minister say the investigation shows that provincial legislation should be changed to allow fines against companies that don’t protect personal information.

Michael McEvoy, the information and privacy commissioner of B.C., said the size of the breach was largest he has investigated.

“This the most significant privacy breach I’ve ever seen in British Columbia as privacy commissioner and I think that our office has seen in many years,” he said in an interview.

Both the Ontario and B.C. offices have ordered LifeLabs to address shortcomings through measures that include improving its security systems and creating written policies and practices regarding information technology security.

But McEvoy said the health care company has opposed the release of the commissioners’ report on the grounds it contained confidential and privileged information.

“LifeLabs said today, in a press release, that it’s been open and transparent from the outset of this matter and we hope that in the spirit of that openness and transparency, they will drop any objections they have to the full publication of our investigation report,” he said.

B.C. Health Minister Adrian Dix backed that call.

“Public interest lies in more information being provided to build public confidence, and that’s how you respond to these things,” he said. ”LifeLabs is a great company and a great partner but what this has shown is they, and all of us, have to do better.”

LifeLabs says it has accelerated its strategy to strengthen its information security systems, including appointing a chief information security officer to lead the improvements.

The company said it has also made efforts to improve its information security management program with an initial $50 million investment and has hired a third-party service to evaluate its response.

“What we have learned from last year’s cyberattack is that we must continually work to protect ourselves against cybercrime by making data protection and privacy central to everything we do,” LifeLabs said in a statement.

Dix, who hasn’t seen the privacy commissioner’s report, said the government made changes in its contract negotiations with LifeLabs after the data breach. Those include provisions that strengthen privacy considerations and offer a place to incorporate the recommendations from the joint investigation, he added.

McEvoy also called for his office to be given the ability to fine companies who breach privacy laws, which Dix said he supported.

Ontario commissioner Brian Beamish says the breach should serve as a reminder to organizations, big and small, that they have a duty to be vigilant.

“I look forward to providing the public, and particularly those who were affected by the breach, with the full details of our investigation,” Beamish said in a statement.

The privacy commissioners said they have given LifeLabs 14 days to take them to court to oppose the release of the report.

This report by the Canadian Press was first published June 25, 2020.

The Canadian Press

Business

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

As of Friday, Alberta has under 10,000 active COVID-19 cases. (Image courtesy CDC)
Three new COVID-19 deaths in Central zone, Alberta under 10,000 active cases

The Central zone sits at 849 active cases, with 52 people in hospital and 10 in the ICU.

(File photo)
After several years in limbo, Parkland Manor to be torn down

Rimoka Housing Foundation has received funding and approval for the demolition

Alberta’s chief medical officer of health Dr. Deena Hinshaw announced 16 additional deaths Thursday. (Photo by Chris Schwarz/Government of Alberta)
No easing of Alberta’s COVID-19 measures Thursday, 678 new COVID-19 cases

The province also hit 1,500 COVID-19 deaths since the beginning of the pandemic

Alberta Premier Jason Kenney said the Canadian government should consider sanctions on the U.S. if they refuse to reconsider the decision to cancel the Keystone XL Pipeline. (THE CANADIAN PRESS/Sean Kilpatrick
Keystone XL officially cancelled, Kenney vows to fight on

U.S. President Joe Biden cancelled the presidential permit for the pipeline on first day of office

Alberta’s chief medical officer of health Dr. Deena Hinshaw said province’s test positivity rate for COVID-19 is steadily declining. (Photo by Chris Schwarz/Government of Alberta)
669 new COVID-19 cases in Alberta, 21 additional deaths

COVID-19 test positivity rate down to 4.5 per cent

Alberta’s chief medical officer of health, Dr. Deena Hinshaw, updates media on the COVID-19 situation in Edmonton, Friday, March 20, 2020. Hinshaw says residents in long-term care and supportive living facilities will remain the priority as the province grapples with a looming slowdown in COVID-19 vaccine supply. THE CANADIAN PRESS/Jason Franson
Alberta long-term care residents remain priority in looming slowdown of COVID vaccine

There are 119 patients in intensive care and 1,463 people have died

Black Press File Photo
Maskwacis RCMP lay charges for attempted murder, kidnapping, and flight from police

Female victim remains in hospital in serious condition.

In this Dec. 18, 2020 photo, pipes to be used for the Keystone XL pipeline are stored in a field near Dorchester, Neb.  THE CANADIAN PRESS/AP-Chris Machian /Omaha World-Herald via AP
‘Gut punch’: Alberta Premier Jason Kenney blasts Biden on revoked Keystone XL permit

Kenney said he was upset the U.S. wouldn’t consult with Canada first before acting

Joe Biden, then the U.S. vice-president, and Prime Minister Justin Trudeau take their seats at the start of the First Ministers and National Indigenous Leaders meeting in Ottawa, Friday, Dec. 9, 2016. THE CANADIAN PRESS/Adrian Wyld
Trudeau, Biden to talk today as death of Keystone XL reverberates in Canada

President Joe Biden opposed the Keystone XL expansion as vice-president under Barack Obama

Prince Edward Island’s provincial flag flies on a flag pole in Ottawa, Friday July 3, 2020. A lozenge plant in Prince Edward Island has laid off 30 workers, citing an “almost non-existent” cold and cough season amid COVID-19 restrictions. THE CANADIAN PRESS/Adrian Wyld
‘Almost non-existent’ cold and cough season: P.E.I. lozenge plant lays off 30 workers

The apparent drop in winter colds across the country seems to have weakened demand for medicine and natural remedies

Gov. Gen. Julie Payette takes the royal salute from the Guard of Honour as she makes her way deliver the the throne speech, Wednesday, September 23, 2020 in Ottawa. THE CANADIAN PRESS/Fred Chartrand
Gov. Gen. Julie Payette resigns, apologizes for ‘tensions’ at Rideau Hall

Payette, who is the Queen’s representative in Canada, has been the governor general since 2017

Grounded WestJet Boeing 737 Max aircraft are shown at the airline’s facilities in Calgary, Alta., Tuesday, May 7, 2019. WestJet will operate the first commercial Boeing 737 Max flight in Canada today since the aircraft was grounded in 2019 following two deadly crashes. THE CANADIAN PRESS/Jeff McIntosh
Passengers unfazed as WestJet returns Boeing 737 Max to service on Calgary flight

After a lengthy review process, Transport Canada cleared the plane to return to Canadian airspace

(Photo submitted)
Community Futures brings back Social Media Challenge for 2021

This time the challenge is for non-profits and community groups

Lucas Berg, left, with the backpacks filled with essential items he donated to the Red Deer Mustard Seed Jan. 19, 2021. (Photo submitted)
Central Alberta teenager donates filled 20 backpacks to Red Deer Mustard Seed

Lucas Berg, 14, of Ponoka County says he ‘just wants to help people’

Most Read