Commissioner's Blog

Dive into Commissioner Kosseim’s insightful blogs covering privacy, access, cyber safety, and beyond. Stay informed and explore the latest insights.

OPC satisfied with actions taken by RESP company since misuse of patient maternity data

The Registered Education Savings Plan (RESP) company whose employee improperly collected and used personal health information of Ontario hospital patients has implemented recommendations from the Office of the Privacy Commissioner of Canada (OPC).  A recently completed third-party audit determined that Global RESP Corporation has put in place appropriate accountability measures to ensure the protection of personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

The OPC’s investigation was conducted in cooperation with the IPC’s investigation, which found the hospital had failed to put in place reasonable technical and administrative safeguards to protect patient information. The hospital has since taken steps to rectify the deficiencies uncovered by our investigation and has satisfied the terms of our Order.

The cooperation between the two offices demonstrates the ability of federal and provincial authorities to work together to address serious privacy issues affecting the public.  For more information, please see the OPC's website.

Media Contact

For a quick response, kindly e-mail or phone us with details of your request such as media outlet, topic, and deadline:

Email: @email
Telephone: 416-326-3965

Contact Us

Social Media

The IPC maintains channels on LinkedIn, X (formerly Twitter), YouTube and Instagram in its efforts to communicate to Ontarians and others interested in privacy, access and related issues.

Our Social Media Policy

Help us improve our website. Was this page helpful?
When information is not found

Note:

  • You will not receive a direct reply. For further enquiries, please contact us at @email
  • Do not include any personal information, such as your name, social insurance number (SIN), home or business address, any case or files numbers or any personal health information.
  • For more information about this tool, please see our Privacy Policy.