The investigation stemmed from a data breach notification by the EMSD, highlighting serious lapses in data protection during COVID-19 testing operations conducted in 2022.
Despite the EMSD's belief that personal data would be automatically deleted after the contract's expiration, it was discovered that sensitive information remained publicly accessible online.
This data breach incident, which affected over 17,000 individuals, underscores the importance of secure data handling practices, especially when dealing with sensitive personal information.
Immediate actions taken by the EMSD following the breach include notifying their contractor to remove personal data and reporting the incident to the Privacy Commission.
Collection
[
|
...
]