• Personal health information of up to 2, 700 individuals, contained on CDs, stolen from a bone densitometry laboratory.
  • Resolved through informal resolution. The health information custodian created a policy regarding the security of the laboratory and of CDs used in it. The health information custodian is also in the process of obtaining a new computer server, eliminating the use of CDs.
  • Section 12(2) – notification requirement fulfilled by the health information custodian by way of posting a notice in the bone densitometry laboratory.