30 staff members illegally accessed 2,158 patient records at Red Deer hospital

RED DEER – Thirty AHS staff members were involved in a breach of 2,158 patient health records at Red Deer Regional Hospital (RDRHC).

Alberta Health Services (AHS) is notifying patients whose electronic patient records were accessed inappropriately at Red Deer Regional Hospital Centre (RDRHC) by APL clinical laboratory staff working at the hospital laboratory.

An internal investigation by the privacy department at Alberta Public Laboratories (APL) has confirmed inappropriate access within 2,158 patient electronic health records at RDRHC.

The investigation was initiated in followup to a routine audit of APL’s electronic laboratory information system in April 2019 that identified unusual login activity had occurred within the patient electronic health records. The ensuing investigation examined a six-month period (December 1, 2018, to May 13, 2019).

The majority of the 2,158 patient health records were of RDRHC emergency patients and consisted of a range of personal demographic information, test orders and clinical records.

APL has reported the breach to Alberta Health and the Office of the Information and Privacy Commissioner of Alberta (OIPC).

“APL regularly audits its electronic laboratory information system to ensure all access and use is job-related and consistent with our legal obligations,” said APL CEO Craig Ivany.

“APL takes the privacy and confidentiality of patient information seriously and non-work related access to patient records is a serious breach of confidentiality and a direct violation of APL privacy and information security policies,” he said.

Thirty staff members had varying degrees of involvement in the breach. Three are no longer employed by APL.

Notifications to affected RDRHC patients were mailed by APL on Oct. 3 in accordance with the Health Information Act. Only those individuals who receive letters were subject to this privacy breach.

READ MORE: Patient health information at risk after theft of hospital equipment

Individuals receiving notification letters will be able to contact a dedicated call-line available through Health Link to ask any questions they may have. Additionally, contact information for the OIPC will be provided should anyone wish to report a concern related to this incident.

Alberta Public Laboratories is a wholly-owned subsidiary of Alberta Health Services with its own governance board.

-george@albertapressleader.ca

Like and follow us on Facebook

Keep up with Alberta’s top stories Follow us on Twitter

Skylon Tower: Ride To The Top. Book Now. Winter in Dubai: up to 25% Off Tours4Fun March Travel Guide