• A not-for-profit organization was unable to locate a diskette containing the personal health information of donors following one of their clinics.
  • Section 12(2) notification requirement met by letter to the affected individuals.
  • Complaint resolved by way of informal resolution. Health information custodian agreed to update their security practices in order to ensure compliance with the Act.