Following a 2019 hacking incident at LifeLabs Inc., which compromised the personal health data of up to 15M Canadians, a joint investigation by Ontario and British Columbia privacy commissioners concluded in 2020 that LifeLabs failed to safeguard client information.
The report, which also found LifeLabs had collected more health information than necessary, was released after the Ontario Court of Appeal dismissed the company's appeal to have it kept hidden on the grounds of attorney-client privilege.
Canada faces rising data breaches driven by cybercrime and state-sponsored attacks, targeting personal, financial, and health data. As threat actors grow more sophisticated, the government has allocated $917.4M, strengthened the Cyber Centre, and offers public guidance to enhance resilience. More companies must implement their own strict safeguards and share intelligence with the government.
While discussions about cyber threat protections are important, we should also discuss how these companies collect and sell our data as a business model. From fitness routines to sleep and menstrual cycles, health tech companies profit from giving third parties access to our most intimate details. If anyone is deciding to sell or monetize this information, it should be the patient.