HI-050007-1 - A Private Laboratory … Loss of personal health information due to theft of a computer. Resolved through informal resolution. The personal health information on the computer was not backed up and, therefore, identification of affected individuals was not possible. Section 12(2) …
HI-050004-1 - A Public Laboratory … Loss of personal health information due to theft of laboratory reports from a commercial courier van. Resolved through informal resolution. The health information custodian worked with the courier company to change its practices to minimize the risk of theft. …
HI-050001-1 - A City Hospital … Misdirected faxes resulting in unauthorized access to personal health information. Resolved through informal resolution. The health information custodian retrieved the faxes and received confirmation that no copies had been made. The health information custodian also …
HI-050002-1 - A Hospital in a Rural Centre … Misdirected fax resulted in unauthorized access to the personal health information of one individual. Resolved through informal resolution. The health information custodian retrieved the personal health information and received confirmation that no …
HI-040003-1 - A Provincial Government Program … Personal health information of one individual sent in error to the wrong person. Resolved through informal resolution. The health information custodian retrieved the personal health information, and undertook a review of its policies and practices …
HI-040001-1 - A Hospital in a Rural Centre … Loss of personal health information due to missing computers. Resolved through informal resolution. The health information custodian revised it policies such that personal health information is no longer saved on local hard drives. Section 12(2) …
HI-040002-1 - A Community Care Access Centre … Loss of agent's appointment book that did not contain personal health information, because it was not identifiable. Resolved through informal resolution. Despite the extremely small chance that any personal health information was in the appointment …
HI-050006-1 … Employee posted personal health information on a website A nurse had a personal website that contained photographs of fellow employees and five patients at the hospital where she worked. The matter was resolved through informal resolution. The nurse immediately removed the photographs …
HI-050005-1 … Diagnostic reports gone missing Hard copies of diagnostic reports were not filed in the patients’ health records and were likely disposed of by one of the health information custodian’s employees. Resolved through informal resolution. The personal health information contained in the …
IPC Practices No. 14 - The Indirect Collection of Personal Information … Tip sheet for government organizations on handling information. … IPC Practices No. 14 - The Indirect Collection of Personal …
IPC Practices No. 8 - Providing Notice of Collection … Tip sheet for government institutions on information management. … IPC Practices No. 8 - Providing Notice of …
IPC Practices No. 9 - Responding to Requests for Personal Information … Tip sheet for government organizations on handling information … IPC Practices No. 9 - Responding to Requests for Personal …
IPC Practices No. 26: Safe and Secure Disposal Procedures for Municipal Institutions … Tip sheet for government insitutions on handling information. … IPC Practices No. 26: Safe and Secure Disposal Procedures for Municipal …
Guidelines on Facsimile Transmission Security … This updated paper sets out guidelines for government institutions to consider when developing systems and procedures to maintain the confidentiality and integrity of information transmitted by fax. … Guidelines on Facsimile Transmission …
Privacy Diagnostic Tool (PDT) Workbook … The PDT is an instrument that uses a series of questions to give businesses a 'read' on how well they manage their customers' personal information. The PDT uses internationally recognized fair information practices as its basis. … Privacy Diagnostic Tool …
Guidelines for Protecting the Privacy and Confidentiality of Personal Information When Working Outside the Office … Provides best practices and tips to assist government organizations in developing policies that address the privacy obligations of employees who are working in locations outside the …
Best Practices for Online Privacy Protection … An educative tool designed to help companies identify and implement appropriate practices for protecting the privacy of their online customers. … Best Practices for Online Privacy …
IPC Practices No. 16 - Maintaining the Confidentiality of Requesters and Privacy Complainants … Tip sheet for government institutions on information management. … IPC Practices No. 16 - Maintaining the Confidentiality of Requesters and Privacy …