Woman accidentally given 33 other patients' health info still looks for resolution years later
A Calgary woman who was accidentally given private medical information belonging to dozens of other people says she's been trying to do the right thing with the documents for nearly two years and is frustrated by the slow pace of the investigation.
Dallas Diamond says a doctor handed her a list of her mother's prescriptions when her mom was discharged from the Peter Lougheed Centre hospital back in 2013.
It wasn't until later she noticed the stack of papers included six additional pages that weren't supposed to be there, including the full names, attending physicians and medical diagnoses of 33 other patients on her mother's unit.
"When I shuffled through the papers and I saw exactly what it was, I was just like, 'Oh, no, no, no. There is no way a copy of this should have been given to me,'" Diamond said.
Two years of correspondence
She says she alerted Alberta's privacy commissioner to the error via registered letter in May 2015 and has been emailing the commissioner's office ever since, with no resolution.
"My frustration is I keep getting brushed off," Diamond said.
At first, she says, the commissioner's office told her she wasn't able to make a formal complaint because it wasn't her own health information that was involved.
- MORE HEALTH NEWS | Alberta woman loses foot, toes, fingers after rare strep A infection
After several emails back and forth, she was told on Jan. 16, 2016, the commissioner "has agreed to investigate the matter on her own motion."
The investigation continues, and Diamond said she's received no update about its status or any guidance about what to do with the six-page document.
She's also been left wondering if the patients whose information is contained in the documents have been notified of the breach.
"I know that if my information had been given to someone mistakenly, I would really want that taken care of in a timely manner," she said.
"And this is going on years now."
An Alberta Health Services (AHS) spokesperson confirmed the privacy commissioner is investigating the matter and referred questions to that office.
The commissioner's office typically doesn't comment on the specifics of active investigations, but spokesperson Scott Sibbald said in general it's up to the relevant health care "custodian" — a legal category that could include a physician, a hospital or AHS itself, depending on the situation — to notify patients of a privacy breach.
Sibbald said the privacy commissioner's office "does not notify affected individuals, nor can we require custodians to notify under the Health Information Act."
'Surprised' by delay
John Church, an associate professor at the University of Alberta who studies health policy, said accidental breaches of private information are bound to happen from time to time within a massive organization like AHS, but he would expect a quicker response once the error has been noted.
"I'm a bit surprised that there has been such a delay in following up on it," he said.
- MORE HEALTH NEWS | 'Unsanitary' home-based dental operation's closure in Calgary prompts health warning
Given that the breach was relatively small and appears to have no malicious intent behind it, Church said it's possible the case simply hasn't been a high priority to investigate.
Other privacy breaches in recent years have involved thousands of patient records and even criminal charges.
For her part, Diamond would just like to see the matter resolved.
"I just feel like I'm kind of still in no-man's land," she said.
"I'm really trying to do the right thing, but they're kind of not letting me."
- MORE HEALTH NEWS | E. coli risk prompts recall of Robin Hood all-purpose flour
