Well, there will be a second report on this other situation, but we found in this first report that there was an underevaluation of the significance of those breaches for individuals, which resulted in an underprotection. We made comments and recommendations on that. We also found that there were information-sharing gaps and accountability gaps. We made a number of recommendations to improve the processes.
On December 5th, 2024. See this statement in context.