I’m Kate Dewhirst.

I’m a lawyer who writes about legal issues affecting healthcare in Canada

Kate Dewhirst Health Law - bringing the law to life. Meet Kate (in 13 seconds)

IPC was in Windsor today and shared some interesting new information

Posted by

The Information and Privacy Commissioner of Ontario spoke today in Windsor.  It’s always good to read the presentations of the IPC’s road shows.  You get the latest information and updates right from the source!

If you don’t have time to read to the end – I’ll start with the breaking news:

New Snooping Prosecution – October 2017

There has been a new PHIPA snooping prosecution. An administrative support clerk in an emergency department of a hospital illegally accessed health records of 44 individuals including in some cases printing their information. The person pled guilty and was fined $10,000.

This brings us to 5 successful prosecutions under PHIPA:

  • 2016– Two radiation therapists at a Toronto Hospital
  • 2016 – A registration clerk at a regional hospital
  • 2017 – A social worker at a family health team
  • 2017– An administrative support clerk at a Toronto hospital

PHIPA presentation

The presentation in Windsor included a specific presentation delivered about PHIPA updates which discussed:

  • Email: How to communicate PHI by email communications – Fact Sheet September 2016
  • Abandoned Records:
  • Fees
  • Bill 119 – and the provincial HER
  • Breach notifications
  • 5 successful prosecutions under PHIPA

New Fact Sheets and Guidelines:

Back to the IPC’s presentation, the following guidelines were highlighted:

  • Reasonable search – April 2017
  • Frivolous and Vexatious Requests – August 2017
  • Instant Messaging and Personal Email Accounts – June 2016
  • Mandatory PHIPA Breach Reporting – September 2017
  • Annual reporting guidelines for PHIPA Privacy Breach Statistics – November 2017
  • Big data guidelines – May 2017
  • De-identification guidelines – June 2016

PHIPA complaints

There were 537 PHIPA complaints to the IPC in 2016 – that’s up from 269 in 2006.

There have been 271 reported privacy breaches in 2017

  • 43 were snooping
  • 8 were ransomware/cyber attacks
  • Others were lost or stolen PHI, misdirected information, records not properly secured and general collection, use and disclosure complaints


If you enjoyed this article please share it:

Previous and next posts from Kate:

Some of Kate’s recent and upcoming events

Health Privacy Officer training
September 22, 2020

For Privacy Officers within healthcare organizations - now totally online.

This course focuses on how to become a more confident privacy officer and gives you the tools to document your privacy program. Full details and registration here...

Primary care webinars: Employment Law Update & Legal Issues for EDs and Board members

Part of Kate’s monthly webinar series.

Our September program is on privacy litigation and the October program will address harassment issues and scenarios.
Full details of the 2020 webinar series and registration here.

Free healthcare privacy webinar - ask me anything!
the first Wednesday of every month (Off for the Summer - next up: September 2 and October 7)

Free webinars - advance registration needed

Whether you're an experienced privacy officer or new in the field, pick Kate’s brain for free for an hour, in this live webinar. No charge, but you’ll need to register in advance.

Free Part X CYFSA privacy webinar - ask me anything!
the second Wednesday of every month (next up: July 8 and August 12)

Free webinars - advance registration needed

Whether you're an experienced privacy officer or new in the field, pick Kate’s brain for free for an hour, in this live webinar. No charge, but you’ll need to register in advance.

Team Privacy Training Events
July 8, 23, 28 August 4, October 7, 8

For Primary Care clinics, Hospitals, Community Agencies and Children’s Aid

Kate trains health professionals from many more health care organizations how being privacy-respectful can improve therapeutic relationships. More details...

Kate Dewhirst Health Law

Kate says:

My mission is bringing the law to life. I make legal theory understandable, accessible and fun! I’m available and love to work for all organizations in the healthcare sector across Ontario and beyond.

Subscribe to my mailing list and keep up to date with news:

Latest Tweets

[OCT 1] Webinar Series Case Study: Harassment investigations Register now - webinars on legal topics for EDs and ma… https://t.co/lgZdYW7mt6

about 7 hours ago

[STARTS SEPT 22, 2020] Become an even better Privacy Officer! Join my health sector online Privacy Officer training… https://t.co/EfW1pfFy4f

12:02 PM Sep 17th

[OCT 7] Register for my free upcoming Ask Me Anything About Health Privacy webinar at this link...… https://t.co/j63mcVxsHJ

12:02 PM Sep 16th

contact details

P.O. Box 97010 Roncesvalles
Toronto Ontario M6R 3B3

(416) 855 9557