The federal privacy watchdog says he’s “concerned” about a data breach involving a student information system used across Canada, and his office is seeking more information from the U.S.-based company behind the targeted software.
Privacy commissioner Philippe Dufresne says his office is in touch with PowerSchool, which provides the affected platforms to schools across North America.
Earlier this month, PowerSchool told school boards in Newfoundland and Labrador, Nova Scotia, Ontario, Alberta and elsewhere that it had experienced a data breach between Dec. 22 and 28.
PowerSchool has said that the cybersecurity incident is “contained” and that it has taken steps to prevent further unauthorized access or misuse of the affected data.
However, Nova Scotia’s Education Department has said that the breach could have a financial impact on some former and current teachers and staff, since some social insurance numbers collected before 2010 were included in the stolen data.
The federal privacy czar says in a statement that his office is looking to obtain more information about the breach and will inform PowerSchool about reporting requirements under Canada’s privacy legislation.
Related Stories
“This will allow us to convey our expectations to the company regarding their response to the breach and to determine next steps,” Dufresne said in a statement on Monday.
“Championing the privacy rights of children is one of my strategic priorities as children’s personal information is particularly sensitive,” he said. “I am concerned about the potential impact that an incident such as this one may have on the personal information of students across the country.”
PowerSchool has said it is providing services to customers as usual as it continues to investigate the breach, and that it takes privacy “extremely seriously.”
