• The Privacy Manager of a hospital contacted the IPC to advise that she found a bag of garbage in front of the hospital that contained personal health information. The garbage originated from a physician’s office, located across the street from the hospital. The physician was the health information custodian.
  • Resolved through informal resolution. The hospital returned some of the contents of the garbage bag to the health information custodian who confirmed that it contained personal health information. The health information custodian reviewed his disposal practices and purchased new shredding machines to ensure the secure destruction of personal health information.