Patients involved in N.S. mass shooting among those caught up in major privacy breach
Nova Scotia Health is under the microscope after eight employees were found snooping into medical records.
The privacy breaches involve the electronic health records of people associated with the April 2020 mass shooting in Nova Scotia, among others.
The Office of the Information and Privacy Commissioner says the discoveries were made by Nova Scotia Health after it proactively monitored employees’ access to the records of those involved in or related to the mass shooting.
The health authority did publicly admit to a privacy breach back on Aug. 4, 2020, but did not give specifics, including how it involved those connected to the shootings in Portapique, N.S.
As part of its investigation, Nova Scotia Health conducted additional audits of the employees’ access to electronic health records, which revealed even more snooping, going back for years.
Nova Scotia Health voluntarily reported the breaches to the Office of the Information and Privacy Commissioner on June 15, 2020.
In a news release Wednesday, the privacy commissioner said the employees also looked up friends, colleagues, and acquaintances. In total, Nova Scotia Health’s investigation uncovered more than 1,200 privacy breaches affecting 270 people.
Privacy Commissioner Tricia Ralph told CTV News charges aren’t being considered because too much time has passed between when the employees were caught and the completion of the investigation.
Current law provides a 12-month window for prosecution.
Had charges been laid for the privacy breaches, they would fall under Nova Scotia’s Personal Health Information Act (PHIA).
Ralph also said there was no evidence to suggest the information was used for anything nefarious. Everyone whose files were compromised was notified.
In an emailed response Wednesday to questions from CTV News, Nova Scotia Health said:
“We apologize to each impacted patient. This breach added further unnecessary harm to the families of those who lost loved ones in April 2020. We deeply regret that this breach took place.”
In response to the snooping, Nova Scotia Health terminated the employment of some of the workers, while others received verbal reprimands and suspensions.
Some of the job classifications involved in these incidents included a booking and registration clerk, a nurse practitioner, and a secretary at an outpatient clinic.
CALL FOR NOVA SCOTIA HEALTH TO IMPROVE PRACTICES
In light of the revelations, Ralph has called on Nova Scotia Health to improve practices to prevent employees from snooping into personal information of its patients.
She gave 12 recommendations that she hopes Nova Scotia Health will implement over the next year, including implementing a user access request and approval process for its electronic information systems.
The commissioner does feel many steps taken by Nova Scotia Health were reasonable.
For example, she said, had it not proactively monitored employee access to electronic health information systems, the privacy breaches would never have been discovered.
However, Ralph said in the release, while Nova Scotia Health does have privacy-relevant policies and protocols, they are at times outdated, unclear, and in many cases, not being followed.
She also noted that policies, training and penalties are not always enough to deter some employees from snooping, adding the temptation to snoop is irresistible for some.
According to the commissioner, Nova Scotia Health is considering the report and has indicated that it intends to accept most of the recommendations.
Nova Scotia Health will have 30 days to formally decide whether it will follow Ralph’s recommendations.
These instances of Nova Scotia Health employees being caught snooping aren’t unique.
In 2018, an investigation uncovered unauthorized access of 335 personal health records by six different staff members at multiple work sites.
At the time, then-commissioner Catherine Tully said an investigation revealed a "dangerous and insidious culture of entitlement" to viewing records at the Nova Scotia Health Authority, with unauthorized access in some cases taking place over a long period of time.
CTVNews.ca Top Stories
W5 Investigates | How did a healthy teen die at a minor hockey camp?
The parents of young Ontario hockey player Ben Teague have been searching for answers since he died while at a team retreat in 2019. The mystery about what happened and the code of silence in hockey culture is explored in CTV W5's 'What Happened to Ben,' on CTVNews.ca and W5's official YouTube channel.

Donald Trump's call for protests gets muted reaction by supporters
Former U.S. President Donald Trump's calls for protests ahead of his anticipated indictment in New York have generated mostly muted reactions from supporters, with even some of his most ardent loyalists dismissing the idea as a waste of time or a law enforcement trap.
Conservatives forcing MPs to vote on striking new foreign interference study
In an effort to keep the foreign interference story at the forefront, and to do an apparent endrun around the Liberal filibuster blocking one study from going ahead, Conservative Leader Pierre Poilievre is forcing MPs to debate and then vote on a motion instructing an opposition-dominated House committee to strike its own review.
6 missing after Old Montreal fire 'probably still in the rubble': Police
Officials are still looking for victims after a fire ripped through a building in Old Montreal last week, killing at least one person. At a press conference Monday morning, spokespersons for the Montreal police and Montreal fire department said six people are still missing. They come from various locations in Quebec, Ontario and the U.S.
opinion | Biden's Canada visit is long overdue and so are the issues facing the North American neighbours: expert
Questions abound as to why U.S. President Biden is only now making the visit to Canada, more than two years into his presidency.
Canada's among central banks try to calm markets after UBS deal to buy Credit Suisse
Some of the world's largest central banks came together on Sunday to stop a banking crisis from spreading as Swiss authorities persuaded UBS Group AG to buy rival Credit Suisse Group AG in a historic deal.
Woman suing Tim Hortons for $500K after hot tea spill left her 'disfigured'
An Ontario woman has launched a lawsuit seeking $500,000 from Tim Hortons after she suffered major burns from an alleged ‘superheated’ tea. The company has denied all allegations and said she was ‘the author of her own misfortune.'
China's Xi meeting Putin in boost for isolated Russia leader
Chinese leader Xi Jinping is due to meet with Vladimir Putin in a political boost for the isolated Russian president after the International Criminal Court charged him with war crimes in Ukraine.
Air passenger complaints triple in one year to pass 42,000 as backlog grows
The number of air passenger complaints to Canada's transport regulator is soaring, more than tripling to 42,000 over the past year.