With regard to the letters that Health Canada mailed to over 40 000 participants in the current medical marihuana access program (MMAP), which disclosed their personal address information on an envelope marked as being from the MMAP: (a) what are the standard protocols governing the communication of changes to medical programs from Health Canada, and what laws or regulations govern these protocols; (b) which branch and department is responsible for mailing out correspondence about the MMAP; (c) how many full-time employees and managers were involved in communicating the MMAP changes in this mail-out; (d) what protocols are followed once a breach of privacy has occurred; (e) what were all of the steps taken when this MMAP privacy breach occurred in November 2013; (f) were the changes that were made to the MMAP subject to a privacy impact assessment; and (g) was that assessment reviewed with the Office of the Privacy Commissioner?
In the House of Commons on January 27th, 2014. See this statement in context.