LifeLabs signage is seen outside of one of the lab’s Toronto locations, Tuesday, Dec. 17, 2019. THE CANADIAN PRESS/Cole Burston

LifeLabs ‘failed to protect’ personal information of millions of Canadians: investigation

The Canadian laboratory testing company was found to have violated its patients’ privacy

A joint investigation between B.C. and Ontario privacy commissioners has found that LifeLabs “failed to protect private information” during its 2019 privacy breach.

The privacy commissioners’ release on Thursday (June 25), found LifeLabs did not have “reasonable safeguards” in place to protect 15 million customers, largely in B.C. and Ontario. The company reported the breach to both privacy commissioners in November of last year, after detecting a cyberattack on its computer systems on Oct. 28.

READ MORE: Hackers target LifeLabs medical database in B.C., Ontario

Although B.C. and Ontario’s privacy commissioners released a broad overview of their investigation report on Thursday, they did not publish the entire report due to LifeLabs’ objections.

“LifeLabs has claimed that some of the information contained in the report is privileged or confidential and objected to the release of that information,” the release stated.

However, the privacy commissioners said they would release the full report unless LifeLabs attempts to get a court ruling in the company’s favour.

The privacy commissioners issued three joint orders to LifeLabs, outline broadly in Thursday’s release: to improve specific practices regarding information technology security, to formally put in place written information practices and policies with respect to information technology security, and to cease collecting specified information and to securely dispose of the records of that information which it has collected.

LifeLabs was also recommended to consult with third-party experts about if a longer period of credit monitoring would be “more appropriate.”

B.C’s privacy commissioner also said the LifeLabs case should serve as an example of why the office needs to be able to impose financial fines and penalties following investigations.

“This is the very kind of case where my office would have considered levying penalties,” said Michael McEvoy, Information and Privacy Commissioner of B.C. For its part, Ontario is expected to be able to levy financial penalties once a recently announced amendment to Ontario’s privacy law comes into effect. It would be the first province in Canada to have the ability to levy monetary penalties against individuals and companies that violate the Personal Health Information Protection Act.

READ MORE: LifeLabs facing proposed class action over data breach affecting up to 15M clients


@katslepian

katya.slepian@bpdigital.ca

Like us on Facebook and follow us on Twitter.

Want to support local journalism during the pandemic? Make a donation here.

privacy

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

West Kootenay mother searching for son missing since Sept. 1

Police are investigating the disappearance of Cory Westcott

MP Morrison faults federal Throne Speech as new Parliament session begins

Kootenay-Columbia representative criticizes a lack of focus on jobs, support for resource sector

Boil water advisory issued for Lower Kootenay Band

Bacteria was discovered in the Band’s water system yesterday

Creston residents invited to participate in scarecrow and pumpkin carving contest

In previous years, the contest was limited to local businesses and select artists who would display their scarecrows along Canyon Street for the event

Membership drive launched to attract input for new Creston Discovery Centre

For more than 40 years, environmental awareness and educational programs were offered at the Creston Valley Wildlife Area’s original Interpretive Centre

B.C.’s top doctor thanks supporters after revealing threats over COVID-19 measures

Dr. Bonnie Henry says COVID-19 has caused some people to lash out in anger and frustration out of fear

97 distressed horses, cats and dogs seized from farm in Princeton

RCMP assisted as BC SPCA executed search warrant

NDP, Greens divided on pace of child care improvements in B.C. election campaign

NDP Leader John Horgan recommitted to $10-a-day child care and blamed the Greens for not supporting his efforts

Category 2 open burning prohibitions rescinded throughout Southeast Fire Centre

Category 3 open fires, as defined in the Wildfire Regulation, remain prohibited

Is it time to start thinking about greener ways to package cannabis?

Packaging suppliers are still figuring eco-friendly and affordable packaging options that fit the mandates of Cannabis Regulations

Join Black Press Media and Do Some Good

Pay it Forward program supports local businesses in their community giving

BC Liberal Leader talks drug addiction in the Lower Mainland

Drug addiction and public safety a top priority says Andrew Wilkinson

Pandemic derails CP Holiday Train

Canadian Pacific will work to get donations to food banks while also producing an online music concert

Interior Health reports five new COVID-19 cases

Across the region, 34 cases are active

Most Read