The Information and Privacy Commissioner, Michael Harvey, has released his Report A-2020-006 under authority of the Access to Information and Protection of Privacy Act, 2015. A summary of the report is included below.
To view the report in its entirety, please go to http://www.oipc.nl.ca/reports/commissioner.
| Report: | A-2020-006 |
| Report Date: | May 26, 2020 |
| Public Body | Memorial University |
| Summary: | The Complainant, a Memorial employee, suspected that some person had accessed sensitive personal files. The files were stored locally on a Memorial computer assigned to the Complainant and had been temporarily migrated to another drive on Memorial’s network. The Complainant filed an access request for the logs of accesses to those files for a particular day. Memorial reviewed the request with its own Information Technology (IT) staff, and with the external consultant that had installed the servers, and responded to the Complainant that because file access is not logged on those servers, the requested records do not exist. The Commissioner was satisfied that file-level access logging had never been enabled on the relevant systems, and that consequently no responsive records exist. The Commissioner concluded that Memorial had fulfilled its duty under section 13 of ATIPPA, 2015 by conducting a reasonable search for records and responding accurately and completely to the Complainant. |
-30-
Media Contact
Sean Murray
Director of Research & Quality Assurance
709-729-6309
2020 05 26
11:50 am