Former P.A. doctor’s privacy breaches prompts investigation
eHealth Saskatchewan, the Crown Corporation which collects and stores electronic health records for residents, along with various users in Prince Albert of eHealth’s digital data bank, have been told to improve training and safeguards regarding the privacy of patients’ information.
This follows an investigation by the province’s Information and Privacy Commissioner into the unethical accessing by former P.A. doctor Josias Furstenberg of patients’ private information on the so-called eHR Viewer.
Commissioner Ronald Kruzeniski found there were insufficient safeguards in place to protect the personal health information being accessed from the digital system.
The crux of his lengthy report focuses on the Health Information Privacy Act (HIPA), which dictates users of the eHealth system can access personal health information of patients only on a need-to-know basis for diagnosis, treatment or care. It was learned that on at least seven occasions between 2016 and 2017 Furstenberg’s access to such information was inappropriate or not authorized in terms of the Act. Kruzeniski found Furstenberg had accessed the personal health information of one patient 255 times in a 13 day period.