Government agency WorkSafeBC said the film's makers should have ensured Joi Harris was wearing a helmet.
It also said barriers should have been in place to stop her "leaving the set perimeter" on 14 August 2017.
20th Century Fox, which made the 2018 film, said it "respectfully disagree[d] with some of the report's findings".
"Safety is our top priority, and while we respectfully disagree with some of the report's findings, Fox thoroughly reviewed its stunt safety protocols immediately following the tragic accident and has revised and implemented enhanced safety procedures and enforcement," it said in a statement.
Deadpool 2 stuntwoman mourned
Stuntwoman dies on Deadpool 2 set
Professional road racer Harris was killed while doubling for actress Zazie Beetz in the comic book-inspired sequel.
According to WorkSafeBC, the 40-year-old died "after she was ejected from the motorcycle she was operating and crashed into the window of a building".
Its report said Fox had "failed to conduct a risk assessment addressing safety controls, speed of the motorcycle, and equipment limitations".
It also said the studio "failed to ensure that the stunt performer was wearing safety headgear" and had failed to provide "adequate supervision".
WorkSafeBC, aka The Workers' Compensation Board of British Columbia, said its investigation's findings could result in an "administrative penalty".
Earlier this year, a lawyer for Harris's family said it had reached an out-of-court settlement with the studio.
After the accident, Deadpool star Ryan Reynolds said it had left everyone on the film "heartbroken, shocked and devastated".
"But [we] recognise nothing can come close to the grief and inexplicable pain her family and loved ones must feel in this moment," he added.
Deadpool 2 was released in 2018 with a dedication to Harris in its credits.