Tag: Case of Note

Showing 1 - 5 of 5 results

Preventing health privacy breaches: Why training, policies, and confidentiality agreements matter

Case of Note: PHIPA Decision 260 Background A public hospital was alerted to suspicious activity on a patient chart, and initiated an investigation, which included a targeted audit. The audit revealed that nearly 4,000 patient charts had been accessed by a physician without authorization, from a

Resource

- Published on Nov 18, 2024

Reported Breach HR23-00282

A prescribed person under the Personal Health Information Protection Act reported a breach to the IPC regarding a cyberattack that involved the unauthorized copying of approximately 3.4 million individuals’ personal health information from the prescribed person’s secure file transfer server. The
Topics

Resource

- Published on Aug 14, 2024

Cyberattack response: Duty to notify individuals under PHIPA and CYFSA

Background The following decisions involved different cyberattacks against four different organizations. Three involved health information custodians (HICs) subject to the Personal Health Information Protection Act (PHIPA), and the fourth involved a Children’s Aid Society subject to Part X of the

Published on Aug 2, 2024

Ransomware reality: Case study in health care cybersecurity and recovery

Case of Note: PHIPA Decision 249 Introduction Unfortunately, ransomware attacks are not an uncommon occurrence, especially in this era of rapidly advancing technologies. Bad actors use ransomware attacks to extract money and cause harm to others. As these types of attacks become increasingly common

Published on Jul 18, 2024

Ransomware reality: Case study in health care cybersecurity and recovery

Unfortunately, ransomware attacks are not an uncommon occurrence, especially in this era of rapidly advancing technologies. Bad actors use ransomware attacks to extract money and cause harm to others. As these types of attacks become increasingly common, health information custodians (HICs) should
Topics

Resource

- Published on Jul 18, 2024