Manager at Sask. clinic snooped on resident's eHealth record over 30 times
A Regina resident turned to Saskatchewan's privacy watchdog after discovering the manager of a clinic they had never been to had snooped on their eHealth record over 30 times.
Information and Privacy Commissioner Ronald J. Kruzeniski outlined the incident and subsequent investigation in a report published late last month.
In 2022, the complainant requested an audit report from eHealth to see who had accessed their personal health information.
The resulting audit revealed that an office manager at Prairie Internal Medicine Specialists in Regina had accessed the complainant’s records 37 times on three occasions (Apr. 21 and Apr. 22, 2021 as well as Aug. 10, 2022).
An investigation was conducted by eHealth at the victim’s request.
eHealth concluded that all of the incidents could be classified as "inappropriate access" to personal health information.
Both parties confirmed that the complainant had never received treatment at Prairie Internal Medicine Specialists, Kruzeniski outlined.
According to a lawyer representing the clinic, its owner only became aware of the incident when contacted by eHealth “in or around the summer of 2022.”
The office manager responsible for the privacy breaches had their eHealth viewer access revoked for six months. After access had been reinstated, the manager was subject to random audits.
These were returned "without issue" according to the clinic’s legal representation.
As for why the records were accessed, the office manager had initially explained their actions by saying they occasionally received referrals or medical information intended for doctors who do not practice at the clinic.
They went on to say that the access in Aug. 2022 was in order to identify a doctor so that the office manager could forward correspondence they had received in error.
At that time, the manager's superior instructed them to return incorrectly addressed referrals or medical information to the original sender and not to access eHealth in those cases.
The explanation did not cover the breaches on Apr. 21-22 of 2021.
Clinic management discovered that the complainant had a connection to a friend of the office manager’s family member. At the time of the breach, the complainant was giving birth to a child. The clinic determined that the manager accessed the complainant’s personal health information in order to see if the child had been born.
Kruzeniski’s office was provided a copy of the clinic’s privacy and security policy manual over the course of the investigation. It was discovered that the office manager in question had written upwards of 25 of the policies included in the manual.
"Since the office manager was the author of the policies in the Policy Manual, then they ought to have been aware that snooping upon the complainant’s personal health information was inappropriate," Kruzeniski wrote in the report.
The clinic told the commissioner that patient safety or care would unlikely be affected by the breach, a point Kruzeniski adamantly disagreed with, while pointing to several instances his office has investigated.
"I caution anyone who believes that snooping does not adversely affect patient safety or care. It does," he said.
Kruzeniski also noted that the clinic should have taken steps to figure out if the manager had disseminated the victim’s personal health information.
In his recommendations, the commissioner advocated for the clinic and eHealth to forward their investigation files to the Ministry of Justice to allow prosecutors to further consider whether an offence had been made.
Additionally, he recommended that random audits of all employees be done on an ongoing basis.
Lastly, Kruzeniski recommended that eHealth continue to audit the office manager indefinitely – at any place that requires them to have access to the eHealth viewer.
CTVNews.ca Top Stories
Speakers at Trump's Madison Square Garden event crudely denounce Harris and Democrats
Donald Trump took the stage Sunday night at New York’s Madison Square Garden to deliver his campaign's closing argument with the election nine days away after several of his allies used crude and racist insults toward U.S. Vice-President Kamala Harris and other critics of the former president.
B.C. election results: Mail-in ballots heavily favour NDP, only absentee ballots left to count
The majority of mail-in ballots tallied this weekend for the final count in B.C.’s nail-bitingly close 2024 provincial election went to the NDP, increasing the party’s chances of clinching a third term.
Here's when you need to change your clock back
Millions of Canadians will notice their clocks turn back by one hour on Nov. 3, marking the end of daylight saving time this year.
New polls show Sask. NDP leading over Sask. Party ahead of election day
A pair of new pre-election polls indicate that the Saskatchewan NDP has a slight lead ahead of election day.
17-year-old charged for driving 188 km/h on Hwy. 417 in Ottawa
A 17-year-old Ottawa driver was caught speeding nearly 90 km/h over the speed limit on Highway 417.
Hollywood star Victor Garber gets emotional after surprise meeting with his former teacher in London, Ont.
Victor Garber got teary-eyed when he walked into a brunch in his honour Sunday in London, Ont.
Another bumpy week ahead as Trudeau faces deadlines from Liberal MPs, Bloc
Another week, another raft of imminent challenges to Justin Trudeau's leadership of both the country and the Liberal Party.
He lost a finger and survived a kidnapping. Then, this climber took on a 9,000-foot 'death-trap'
With jaw-dropping big wall ascents and a life packed with adrenaline and adventure, climber Tommy Caldwell has had a career worthy of – and captured by – a feature film.
How to make sure your used clothes go to the right place – and not to organized crime
Giving away used clothes for a second life feels like an act of charity – and it often is. But it’s become more complicated. A W5 investigation has discovered allegations that organized crime players are muscling in on charities to access their donation bins.