'Oh, he's still alive': Sask. pharmacy student caught snooping on medical records of 114 people
A fourth-year pharmacy student doing an internship at a Regina drug store was caught snooping on the medical records of 114 people who were not in their care.
The University of Saskatchewan (U of S) student, working at Hill Avenue Drugs Pharmacy, accessed the records of people via the Pharmaceutical Information Program (PIP) and the electronic Health Record Viewer (eHR), according to a recent report from the province’s privacy commissioner Ron Kruzeniski.
The student was dismissed by the pharmacy, and Kruzeniski says the U of S College of Pharmacy and Nutrition, eHealth Saskatchewan and the Ministry of Health did not properly handle the breaches in accordance with four best practice steps.
The student’s placement at the pharmacy started May 6, 2024 and lasted until he was escorted out of the building on June 25.
According to Kruzeniski, a pharmacist caught the student talking to himself and allegedly said, "oh, he’s still alive."
“The student was asked who he was reviewing and he quickly shut down a number of patient searches. Following an audit, it was determined the student was looking up patients that were not customers/patients of the pharmacy. The snooping started five days into the student’s placement,” the document reads.
According to the document, the student’s access to PIP and eHR were revoked on June 26 and 27 but it was not determined if paper copies of inappropriate information were made.
In July letters were mailed out to 109 individuals notifying them that their information has been inappropriately accessed, Kruzeniski says. Five individuals whose information was accessed were confirmed to be dead.
Kruzeniski made a total of four recommendations to better handle similar privacy breaches in the future.
The recommendations were:
- That within 30 days of issuance of this Investigation Report, the U of S amend its Student Placement Agreement with the student and all trustees going forward so it spells out how privacy breaches will be handled and what the expectations/responsibilities of the U of S and the trustee are in such situations.
- That within 30 days of issuance of this investigation report, the student develop policies and procedures in compliance with section 16 of HIPA. Said policies and procedures should include supervision and auditing of student access in PIP and the eHR Viewer on site.
- Going forward, eHealth provide access to the eHR Viewer only under the APO associated to the site rather than the U of S (except hospital-based rotations).
- Within 30 days of issuance of this Investigation Report, the U of S, Health, and eHealth review the current understanding of responsibility for supervision, protection of personal health information in the systems and the roles of each party in the event of a privacy breach with future placements. The understandings should be in writing in either agreements or policies and procedures, so all parties are clear.
CTVNews.ca Top Stories
3 injured after man with knife enters Montreal-area mosque
Three men were injured after trying to subdue a man armed with a knife during afternoon prayers at a Montreal-area mosque Friday afternoon.
Police arrest 18-year-old woman who allegedly stole Porsche and ran over its owner
Police have arrested an 18-year-old woman who allegedly stole a Porsche and then ran over its owner in an incident that was captured on video.
Woman nearly shut out of mother's estate sues brother in B.C. Supreme Court – and wins
Since she was a young girl growing up in Vancouver, Ginny Lam says her mom Yat Hei Law made it very clear she favoured her son William, because he was her male heir.
Teen arrested in New Brunswick after emergency alert; 5 people in custody
A 15-year-old boy who was the subject of an emergency alert in New Brunswick has been arrested.
Kamala Harris tells Oprah any intruder to her home is 'getting shot'
U.S. Vice-President Kamala Harris on Thursday issued a warning to any potential home intruder: 'If somebody breaks in my house, they're getting shot.'
On the trail of the mystery woman whose company licensed exploding pagers
What Cristiana Barsony-Arcidiacono, 49, the Italian-Hungarian CEO and owner of Hungary-based BAC Consulting, says she hasn't done is make the exploding pagers that killed 12 people and wounded more than 2,000 in Lebanon this week.
Woman shot by B.C. police was Colombian refugee with young daughter, advocate says
Advocates have identified the woman who died this week after being shot by police in Surrey, B.C., as a South American refugee who was raising a young daughter.
'We're still pushing hard': Search for missing Manitoba boy continues, RCMP find tracks
The search for a missing six-year-old boy in Shamattawa is continuing Friday as RCMP hope recent tips can help lead to a happy conclusion.
Video released of person of interest after cat is allegedly set on fire in Orillia, Ont.
Provincial police investigating the death of a cat that was allegedly set on fire in Orillia earlier this week released surveillance video of a person of interest in the case.