PHIPA DECISION 184

The office of the Information and Privacy Commissioner of Ontario received a complaint under the Personal Health Information Protection Act (the Act) against a medical clinic. The complaint alleged that the clinic had inadequate privacy practices with respect to the security and safeguarding of the personal health information of its patients. The decision finds that the clinic did not have reasonable measures in place to ensure the protection of the personal health information of its patients as required by section 12(1) of the Act. However, in light of the steps taken by the clinic to address the issues identified, no review of this matter will be conducted under Part VI of the Act.