Investigation Report: PHIA Privacy Breach – Winnipeg Regional Health Authority
investigations & monitoring
health facility, body or trustee
Summary
Winnipeg Regional Health Authority. Provisions 20(1), 20(2), 20(3), 21. A nurse at Grace General Hospital inappropriately accessed 1756 patient records in the Winnipeg Regional Health Authority (WRHA) Emergency Department Information System (EDIS). The nurse accessed the EDIS records by using login credentials that she had obtained while working in an emergency department at a different employer, Seven Oaks General Hospital. At the time the records were accessed, the nurse was not providing care to emergency department patients at Grace General Hospital and did not have an employment need to access the records. The WRHA conducted an internal investigation of the breach and reported the breach to our office. Our review of the WRHA investigation and response found that the WRHA took reasonable and appropriate steps to address this breach.
CASE 2018-0195