Faxes containing personal health information were misdirected to a private business.
Section 12(2) notification requirement met through the notification of the individuals by the intended recipients of the faxes.
Complaint resolved by way of informal resolution. Health information custodians involved agreed to update their policies and procedures in order to ensure compliance with the Act.