• Access to the personal health information of seven individuals by an unauthorized person, due to an error.
  • Resolved through informal resolution. The custodian retrieved the personal health information and reviewed and revised its policies and procedures regarding the destruction of personal health information.
  • Section 12(2) – notification requirement was met by way of verbal notification to two patients by the treatment team at their next scheduled appointment. The remaining five patients were former patients and could not be contacted by telephone. With respect to the former patients, the notification requirement was met by placing a note on their health records that they are to be verbally notified of the incident in the event they return to the facility.