Overview

• The Office of the Privacy Commissioner of Canada has formally closed its federal inquiry into PowerSchool’s December data breach after the company implemented containment and notification measures.
• Privacy Commissioner Philippe Dufresne said his office will monitor PowerSchool’s adherence to agreed security upgrades, including forensic and authentication steps by July’s end and enhanced monitoring tools by December.
• Separate investigations by Ontario and Alberta privacy watchdogs remain active, reviewing PowerSchool’s compliance with provincial data protection laws.
• PowerSchool paid an extortion demand in May to prevent public release of personal data that included Social Insurance Numbers, medical records and contact information of students, staff and parents.
• The company has offered credit protection to those affected and must submit an independent security assessment report by March 2026.