Collection
Health Information and Privacy
Date
File Numbers
HI22-00001
Adjudicators
John Gayle
Decision Type
Decision
Applicable Legislation
PHIPA - 2
PHIPA - 3(1)
PHIPA - 4(1)
PHIPA - 10(1)
PHIPA - 12(1)
PHIPA - 29
A public hospital (the hospital) reported three separate privacy breaches under the Personal Health Information Protection Act, 2004 (the Act) to the Information and Privacy Commissioner of Ontario. Each breach involved unauthorized access to patients’ personal health information by an employee of the hospital. In light of the steps taken by the hospital to address the breaches, no formal review of this matter will be conducted under Part VI of the Act.