• Access to the personal health information of 17 individuals by unauthorized staff members at a hospital.
  • Resolved through informal resolution. The custodian conducted a review of its policies and procedures that relate to the privacy of personal health information. The custodian is also developing a privacy breach protocol and will be conducting educational sessions to staff on the importance of privacy of personal health information.
  • Section 12(2) – notification requirement fulfilled by the custodian by way of written letter to the affected individuals.