PHIPA DECISION 163

Collection
Health Information and Privacy
Date
File Numbers
HR18-73
Adjudicators
Soha Khan
Decision Type
Decision - PHIPA
Applicable Legislation
PHIPA

A public hospital (the hospital) contacted the Office of the Information and Privacy Commissioner of Ontario (IPC) to report a privacy breach under the Personal Health Information Protection Act, 2004 (PHIPA or the Act). Specifically, a hospital employee inappropriately accessed highly sensitive personal health information (phi) of a family member. In light of the steps taken by the hospital to address the breach, no formal review of this matter will be conducted under Part VI of PHIPA.