Important court decision on legal privilege in cyber incident response

The Ontario Divisional court just delivered a decision that is a must-read for lawyers practicing in the area of cybersecurity incident response. The Information and Privacy Commissioner of Ontario demanded that LifeLabs turn over forensic and other reports related to a ransomware incident, over which LifeLabs claimed privilege. On judicial review, the Divisional Court agreed with the Commissioner and upheld the order that they were not privileged. The Ontario Divisional Court decision is here: LifeLabs LP v. Information and Privacy Commr. (Ontario), 2024 ONSC 2194 Where you can find me: ► Privacylawyer blog: ► My law firm: ► Twitter: ► LinkedIn: Disclaimer: This is intended for education and information only and should not be taken as legal advice. If you need advice for your partic