• Possible access to the personal health information of 128 individuals by unauthorized persons due to theft of hard copies of personal health information from a staff member’s vehicle. The material was returned to the staff member a few weeks later.
  • Resolved through informal resolution. The custodian worked with the health care facility to review and revise its policies regarding the security and privacy of personal health information.
  • Section 12(2) – notification requirement met by way of written letter to the affected individuals.