Right to Information and Protection of Privacy Act (RTIPPA)
Personal Health Information Privacy and Access Act (PHIPAA)
Use this form to report a privacy breach. A privacy breach occurs whenever there is unauthorized access, collection, use, disclosure or disposal of personal information and/or personal health information.
WHEN YOU DISCOVER A PRIVACY BREACH:
- Step 1: Contain the Breach
- Step 2: Evaluate the Risks
- Step 3: Notification
- Step 4: Prevention
The first three steps should be undertaken immediately upon discovery of the breach or in very quick succession. Regarding Step 3 and as per s.49(1)(c), you must notify the individual to whom the information relates and the Commissioner’s Office. The fourth step is undertaken once the causes of the breach are known, in an effort to find longer term solutions to the identified problem.
STEPS INVOLVED:
- Complete this form.
- Submit the form online, or Send a completed .PDF version of the form by fax: 506.453.5963, email: [email protected] or regular mail: 230-65 Regent Street, Fredericton, NB E3B 7H8
- If you have questions call: 506.453.5965 or 1.877.755.2811
This form is adapted in part from material prepared by the Office of the Information and Privacy Commissioner for Nova Scotia, “Key Steps to Responding to Privacy Breaches” available online at:
https://foipop.ns.ca/sites/default/files/publications/Key%20Steps%20-%20Full%20-%20Final%20-%202015Oct27_0_0.pdf
and in part from material prepared by the Office of the Information and Privacy Commissioner for Newfoundland and Labrador, “Privacy Breach
Reporting Form” available online at:
http://www.oipc.nl.ca/pdfs/PrivacyBreachIncidentReportForm.pdf