Tag: Health

Showing 1 - 10 of 99 results

Ensuring secure disposal of health records: Out of sight is not out of mind!

Case of Note: PHIPA Decision 266 Background A complaint was brought to the Information and Privacy Commissioner of Ontario (IPC) alleging that a health clinic had failed to securely dispose of records of personal health information (PHI). To support the allegations, photographs of patient records
Topics

Resource

- Published on Feb 10, 2025

Lost and found: Preserving abandoned health records

Case of Note: PHIPA Decision 221 (interim) and PHIPA Decision 230 (final) Background The Information and Privacy Commissioner of Ontario (IPC) was contacted about a case of potentially abandoned medical records at a storage facility. The report came from a property management company that was acting
Topics

Resource

- Published on Jan 7, 2025

Info Matters Podcast Awards Cover Graphic

S4-Episode 10: Lessons in health privacy: Key takeaways from 2024

In this episode, Commissioner Patricia Kosseim delves into significant health privacy cases of 2024 with her colleagues from the IPC. The conversation highlights challenges, practical takeaways, and lessons learned from recent cases and investigations under Ontario's Personal Health Information...

Multimedia

- Published on Dec 30, 2025

The IPC raises concerns about privacy and access to personal health information under Bill 231, the More Convenient Care Act

Schedule 6 of Bill 231, the More Convenient Care Act introduces a complex initiative to enable Ontarians' use of a digital health identity tool with the intent that Ontarians will use it to access their health records. It contains significant changes to Ontario’s health privacy law that put
Download PDF
Topics

Resource

- Published on Dec 13, 2024

Joint Investigation into LifeLabs Data Breach

The joint investigation report concerning the 2019 cyberattack on LifeLabs’ computer systems was completed in June 2020. The Ontario Court of Appeal recently dismissed LifeLabs’ bid to block public release of the report.
Download PDF
Topics

Resource

- Published on Nov 25, 2024

Commissioners publish 2020 investigation report into LifeLabs privacy breach affecting millions of Canadians

The report was published after the Ontario Court of Appeal dismissed Lifelabs’ bid to block public release of the report TORONTO, ON — Ontario and British Columbia Information and Privacy Commissioners have published the 2020 investigation report into the LifeLabs privacy breach affecting millions...
Topics

News Release

- Published on Nov 25, 2024

Preventing health privacy breaches: Why training, policies, and confidentiality agreements matter

Case of Note: PHIPA Decision 260 Background A public hospital was alerted to suspicious activity on a patient chart, and initiated an investigation, which included a targeted audit. The audit revealed that nearly 4,000 patient charts had been accessed by a physician without authorization, from a
Topics

Resource

- Published on Nov 18, 2024

Reported Breach HR23-00282

A prescribed person under the Personal Health Information Protection Act reported a breach to the IPC regarding a cyberattack that involved the unauthorized copying of approximately 3.4 million individuals’ personal health information from the prescribed person’s secure file transfer server. The
Download PDF
Topics

Resource

- Published on Aug 14, 2024

Cyberattack response: Duty to notify individuals under PHIPA and CYFSA

Background The following decisions involved different cyberattacks against four different organizations. Three involved health information custodians (HICs) subject to the Personal Health Information Protection Act (PHIPA), and the fourth involved a Children’s Aid Society subject to Part X of the
Topics

Resource

- Published on Aug 2, 2024

Cyberattack response: Duty to notify individuals under PHIPA and CYFSA

Background The following decisions involved different cyberattacks against four different organizations. Three involved health information custodians (HICs) subject to the Personal Health Information Protection Act (PHIPA), and the fourth involved a Children’s Aid Society subject to Part X of the
Topics

Published on Aug 2, 2024