Access to the personal health information of 17 individuals by unauthorized staff members at a hospital.
Resolved through informal resolution. The custodian conducted a review of its policies and procedures that relate to the privacy of personal health information. The custodian is also developing a privacy breach protocol and will be conducting educational sessions to staff on the importance of privacy of personal health information.
Section 12(2) - notification requirement fulfilled by the custodian by way of written letter to the affected individuals.
