Office of the Information and Privacy Commissioner releases Report P-2026-001 on the PowerSchool Privacy Breach

Newfoundland and Labrador will enhance cybersecurity training for all departmental staff in response to a privacy commissioner's report on the 2024 PowerSchool data breach. The training upgrade is one of several measures the provincial government outlined following the report.

The article reports that the Privacy Commissioner’s final review of the 2024 PowerSchool cyberattack found the Department of Education acted appropriately but lacked adequate oversight to ensure PowerSchool met security obligations. The findings were released this week, with Privacy Commissioner Kerry Hatfield discussing them with NTV.

The article reports that Newfoundland and Labrador’s privacy commissioner says laws should be enacted to hold companies accountable following the PowerSchool data breach. It also states that the province needs to better manage residents’ information.

The report describes an own-motion investigation by the Commissioner into the PowerSchool privacy breach that affected the Newfoundland and Labrador school system, compromising personal information of current and former students dating back to 1995 and of their parents/caregivers, as well as teacher information dating back to 2010. It summarizes key…

The article notes that Canada’s federal privacy commissioner says the office is aware of the matter and has reached out to Instructure to obtain more information and determine next steps. It also states that Ontario’s privacy commissioner’s office was notified of the incident Friday and is looking into the matter, with both offices emphasizing monitoring…