A statement from the privacy commissioners of both Ontario and British Columbia says their joint report, completed in June 2020, found that LifeLabs "failed to take reasonable steps" to protect clients' data while collecting more personal health information than was "reasonably necessary."