Share on LinkedInShare on LinkedIn

ARTICLE · 05 DECEMBER 2025

The PowerSchool IPC Report: Five Tips For School Boards And Ontario Institutions

Borden Ladner Gervais LLP
Borden Ladner Gervais LLP
Contributor
Borden Ladner Gervais LLP

Borden Ladner Gervais LLP

With over 750 lawyers, intellectual property agents and other professionals, BLG services...

View firm profile
Explore more from Borden Ladner Gervais LLP

On November 17, 2025, the Ontario Information and Privacy Commissioner (IPC) released a complaint report arising from the December 2024 cyberattack against the PowerSchool Student Information System (SIS).

CanadaPrivacy
Daniel J. Michaluk
Daniel J. Michaluk
Shane Morganstein
Shane Morganstein
Krystin Chung
Krystin Chung
Author LinkedIn connections

On November 17, 2025, the Ontario Information and Privacy Commissioner (IPC) released a complaint report arising from the December 2024 cyberattack against the PowerSchool Student Information System (SIS). The report is the IPC's most current guidance on the obligations of Ontario public sector institutions that outsource systems for processing personal information.

The findings

Twenty public school boards reported the PowerSchool incident to the IPC.

A threat actor used compromised credentials with elevated permissions to access multiple SIS environments and exfiltrated data relating to current and former students, parents/guardians, and educators.

The IPC concluded that, as a whole, the institutions did not have reasonable measures in place to prevent unauthorized access. It focused on the respondent boards' management of PowerSchool, stressing the need for school boards to collaborate in obtaining more protective contractual terms and the need for school

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

OPC Issues New PIPEDA Guidance On Assessing Third-Party Service Providers

Canada's privacy regulator has released new draft guidance establishing comprehensive due diligence standards for organizations evaluating third-party service providers under PIPEDA. The framework introduces eleven best practices covering everything from data flow mapping and AI training data sourcing to vendor lock-in risks and ongoing monitoring obligations, signaling heightened expectations for privacy accountability in vendor relationships.
CanadaPrivacy
Bennett Jones LLP
Bennett Jones LLP
Article

From Duties To Import Bans: The Canada–U.S. Tariff War After The Collapse Of Negotiations

The United States has escalated its trade dispute with Canada by imposing import bans on alcoholic beverages, dairy products, and motorcycles under Section 338 of the Tariff Act of 1930, while Canada responds with matched counter-tariffs on $27.6 billion worth of U.S. goods. Following the collapse of bilateral negotiations in August 2026, both nations have entered an unprecedented phase of trade restrictions that extends beyond traditional tariffs to include procurement exclusions and threatens further auto
GlobalInternational Law
Borden Ladner Gervais LLP
Borden Ladner Gervais LLP
Article

Canada Investment Summit 2026: What Business Leaders Need To Know

Canada's inaugural Investment Summit in September 2026 aims to attract $1 trillion in investment across defence, infrastructure, Indigenous partnerships, technology, energy, critical minerals and agriculture. This analysis examines the federal measures shaping the Summit's agenda and outlines the key legal, regulatory and structuring considerations businesses and investors should evaluate when assessing nation-building opportunities in Canada.
CanadaGovernment, Public Sector
Borden Ladner Gervais LLP
Borden Ladner Gervais LLP
Article

New Churchill Falls Agreement: Key Terms For Newfoundland And Labrador, Québec And Canadian Power Markets

Newfoundland and Labrador's House of Assembly has approved a landmark definitive cooperation and implementation agreement that would replace the 1969 Churchill Falls Power Contract, pair the redevelopment of Churchill Falls with the Gull Island project, and establish new transmission pathways through Québec. The agreement faces political uncertainty in Québec ahead of the October 2026 provincial election...
CanadaEnergy and Natural Resources
Borden Ladner Gervais LLP
Borden Ladner Gervais LLP
Article

SCC Clarifies When Administrative Errors Are “irregularities” Requiring Annulment Of Election

The Supreme Court of Canada annulled a federal election in Terrebonne, Quebec after a single mail-in ballot went uncounted due to an Elections Canada administrative error—a postal code mistake that directly affected the one-vote margin of victory. In a 6-3 decision, the majority clarified that serious administrative errors can constitute "irregularities" under the Canada Elections Act even without fraud or intentional wrongdoing, fundamentally reshaping how courts balance electoral integrity against v
CanadaLitigation, Mediation & Arbitration
Borden Ladner Gervais LLP
Borden Ladner Gervais LLP
Article

New AI Safety Standard Relevant To Canadian School Boards

A major U.S. vendor agreement has established a rigorous new AI safety standard for educational technology, prohibiting the use of student data for AI training and enforcing strict data minimization. While the standard does not directly bind vendors in Canada, Canadian school boards can leverage this precedent to demand equivalent contractual protections and strengthen their own AI governance frameworks.
CanadaTechnology
Borden Ladner Gervais LLP
Borden Ladner Gervais LLP