I’m Kate Dewhirst.

My team and I write about legal issues affecting healthcare in Canada.

Kate Dewhirst Health Law - bringing the law to life. Meet Kate (in 13 seconds)

Are paper health records dangerous?

Posted by

While we live in a highly digitized world, we still rely A LOT on paper in healthcare. As we move towards even more integrated care, the reliance on and existence of paper health records will be a challenge to overcome.

From a privacy perspective, paper health records can be tricky to protect from loss, theft, unauthorized use and disclosure. The piece of paper offers challenges its electronic copy does not face.

Loss

Paper health records are vulnerable to loss in a way electronic records are not.  Floods and fires can decimate paper records without backup. If a paper record is misfiled, it may be lost forever, buried in another chart in a drawer with hundreds or thousands of other charts without the benefit of the Ctrl F  functionality leaving you with the only option of manual searching.

Shredding vs. Recycling

There are a number of privacy breach cases rooted in mistaken recycling of paper health records that were meant to be shredded. Confidential shredding bins are essential equipment for healthcare teams.  Still privacy breaches abound through human error. Leaving the key in the confidential shredding bin to make it easier to fit more paper leaves the bin vulnerable to interference.  Leaving overflow bags of shredding next to the confidential shredding bin can mean they are mistaken for recycling. Using “blue bins” as interim holding bins for what should be shredded can prove dangerous when cleaners mistake the blue shredding bin for a blue recycling bin.

Garbage

There is a JAMA study showing Canadian hospitals consistently found low to high sensitivity paper records with identifiable health information thrown into their garbage cans.

Inadvertent Viewing

Avert your eyes! Ever notice that bored patients or their family members will read ANYTHING available when they have to wait to be seen. They even read upside down!  When people are bored they will look for things to do.  Paper records of other patients make for fascinating reading.  Keeping a clean desk without paper records viewable to passersby can be challenging to maintain.

What’s a Privacy Officer to do?

Most healthcare teams deal with paper health records to some extent.  Privacy Officers should not forget that paper likely exists in your team and make sure to include tips on how to protect paper records in your privacy training and reminders.


If you enjoyed this article please share it:


Previous and next posts from Kate:

Some of Kate’s recent and upcoming events

Free healthcare privacy webinar - ask me anything!
the first Wednesday of every month

Free webinars - advance registration needed

Whether you're an experienced privacy officer or new in the field, pick Kate’s brain for free for an hour, in this live webinar. No charge, but you’ll need to register in advance.

Primary care webinars: Employment Law Update & Legal Issues for EDs and Board members

Part of Kate’s monthly webinar series.

Our 2025 program is now live.
Full details of the 2024 webinar series and registration here.

Mental Health webinars: Legal issues for mental health and addictions agencies and teams
Annual membership 2025

For managers and other leaders from mental health and addictions agencies, hospitals, CMHAs, CHCs, school boards, FHTs and Indigenous health services

This is an annual membership program with monthly webinars.
Full details and registration here.

Health Privacy Officer Foundations training
starts Spring 2025

For Privacy Officers within healthcare organizations.

This course focuses on how to become a more confident privacy officer and gives you the tools to document your privacy program. Full details and registration here...

Join the Shush: a collective of health privacy officers
Annual membership 2024

For Privacy Officers within healthcare organizations

This is an annual membership program that takes theory into practice and tackles real life scenarios to build Privacy Officer skills.
Full details and registration here.

Team Privacy Training Events

For Primary Care clinics, Hospitals, Community Agencies, Mental Health Teams, Public Health Units, School Boards, Police departments

Scheduled to your team's needs for comprehensive or refresher training More details...

Free summary of all PHIPA IPC decisions

Want to read privacy breach stories to learn how to improve your work? We have summarized all the Information and Privacy Commissioner's health privacy decisions for you Download here...

Kate Dewhirst Health Law

Kate says:

My mission is bringing the law to life. I make legal theory understandable, accessible and fun! I’m available and love to work for all organizations in the healthcare sector across Ontario and beyond.

Subscribe to my mailing list and keep up to date with news:

Latest Tweets

  • Our twitter feed is unavailable right now. Follow us on Twitter
  • contact details

    P.O. Box 13024, RPO Bradford Centre
    Bradford, ON, L3Z 2Y5

    (416) 855 9557

    .