Saskatchewan: OIPC issues decision on health data breach
The Office of the Saskatchewan Information and Privacy Commissioner ('OIPC') released, on 29 June 2018, Investigation Report 083-2018 084-2018, in which it considered the misdirection of two lab reports, containing the personal health information, to the wrong physician in contravention of the Health Information Protection Act 1999 ('the Report').
The OIPC noted that the Saskatchewan Health Authority ('SHA') had contained the breach, notified affected individuals and implemented measures to prevent similar breaches from occurring, including adding a line for the physician's printed name and identification number on its forms. In addition, the OIPC also noted that the SHA was also drafting a work standard for quality assurance that will outline the responsibilities of administrative and supervisory personnel.
You can read the Report here.