The investigation into the October 2021 cyber attack on the provincial health system is being led by Sean Murray, Director of Research and Quality Assurance at Office of the Information and Privacy Commissioner (OIPC) in accordance with the authority delegated to him under section 103 of the Access to Information and Protection of Privacy Act, 2015 and section 80 of the Personal Health Information Act.
Media inquiries have sought an update on the status of the investigation. Mr. Murray wishes to advise that a robust investigation is ongoing and active, although there have been delays, due to factors including staff turnover at the OIPC at an earlier stage of the investigation, and timeliness of responses from some of the public bodies in question. Presently, the investigation is awaiting responses to a series of questions which have been put to the affected Regional Health Authorities, the Newfoundland and Labrador Centre for Health Information, and the Department of Health and Community Services.
Mr. Murray commented: “Our questions to the Department of Health and Community Services, which were disclosed publicly by the provincial government in a recent court filing, were sent to the Department’s counsel on January 9th, 2023. We expect to receive the Department’s response, as well as those of the other public bodies, no later than mid-April. That is more than enough time to fully answer our questions, and I anticipate nothing less than a thorough, detailed set of responses. I foresee it will take a period of weeks to then analyze what we receive, determine whether any further steps are required, and ultimately issue my report.”
-30-
Media contact
Sean Murray
Director of Research and Quality Assurance
709-729-6309