A Regina resident turned to Saskatchewan’s privacy watchdog after discovering the manager of a clinic they had never been to had snooped on their eHealth record over 30 times.
Information and Privacy Commissioner Ronald J. Kruzeniski outlined the incident and subsequent investigation in a report published late last month.
In 2022, the complainant requested an audit report from eHealth to see who had accessed their personal health information.
The resulting audit revealed that an office manager at Prairie Internal Medicine Specialists in Regina had accessed the complainant’s records 37 times on three occasions (Apr. 21 and Apr. 22, 2021 as well as Aug. 10, 2022).
An investigation was conducted by eHealth at the victim’s request.
eHealth concluded that all of the incidents could be classified as “inappropriate access” to personal health information.
Both parties confirmed that the complainant had never received treatment …