AAR Breach Notice (2026)
June 2026
Native Child and Family Services of Toronto is committed to protecting the privacy of the children, youth, and families we serve.
We are writing to inform you of a privacy breach involving Action and Assessment Records (AARs).
What happened
Between 2012 and 2022, NCFST, along with other child welfare agencies across Ontario, shared AAR data with the University of Ottawa for the purpose of analysis. This was done in accordance with a sector-wide directive at the time.
Following a review by the Information and Privacy Commissioner of Ontario (IPC), it has been determined that this sharing did not meet legal requirements under the Child, Youth and Family Services Act (CYFSA) and constituted an unauthorized disclosure of personal information.
What information may have been involved
The AAR information shared did not include names; however, it may have included other service-related details. While efforts were made to de-identify the information, these measures were not sufficient under current legal standards.
What this means for you
There is no evidence at this time that the information has been misused, and the risk of harm is considered low. However, we take this matter seriously and are committed to transparency.
NCFST discontinued participation in this initiative in 2022.
Commitment to Indigenous communities
As part of our commitment to reconciliation and accountability, NCFST is engaging with Indigenous partners and communities to ensure full transparency around this process.
For questions or concerns, please send correspondence to [email protected]
