Canadian Healthcare Technology Logo
  • Issues
    • Current Print Issue
    • Print Archive
  • Advertise
    • Publishing Schedule
    • Circulation
    • Unit Sizes and Rates
    • Mechanical Requirements
    • Electronic Advertising
    • White Papers
  • Subscribe
    • Print Edition
    • e-Messenger
    • White Papers
  • Events
  • Vendors
  • About Us

GE Revolution Ascend

GE Revolution Ascend

Enovacom EPC

Enovacom EPC

Privacy & Security

Unauthorized Gmail use results in possible data loss

September 11, 2019


AHSCALGARY – A physician working at Calgary’s Richmond Road Diagnostic and Treatment Centre is notifying approximately 7,000 Albertans that the security of their personal health information may have been compromised due to the criminal hacking of a personal Gmail account.

The physician’s Gmail account was improperly used to transmit health information in contravention of Information Security & Privacy policies that prohibit conducting clinical business on behalf of AHS and AHS patients using non-AHS issued email accounts.

While there is no present evidence to suggest the patients’ personal and healthcare information has been accessed by the hacker, care and control of the information was unintentionally lost, which constitutes a privacy breach under the Health Information Act (HIA).

“While this privacy breach was unintentional and is deeply regretted by the physician, that does not in any way diminish the seriousness of the matter,” said Dr. Francois Belanger, vice president, quality & chief medical officer.

“Our principal focus right now is working to identify and notify all affected patients.”

The hacking incident is being investigated by the Calgary Police Service and AHS is currently conducting an internal review. The physician is cooperating with the AHS investigation.

AHS is working with the physician’s office to notify all affected patients of this potential privacy breach, and is providing a staffed telephone line to provide information to anyone requesting further information or assistance.

AHS’ policy on email use has been clear and consistently communicated. Where AHS physicians, staff and volunteers communicate personally identifiable health information, and both recipient and sender have AHS-issued email accounts, AHS secure email must be used. Where the sender has an AHS email account and the recipient does not (this includes but is not limited to all iCloud, Gmail, Hotmail, and Yahoo accounts), then the AHS email protocol for sending encrypted email must be used.

“Unfortunately, these policies were not followed in this instance, which underscores the need for AHS to do further work to educate physicians and staff about this vitally important practice,” said Dr. Belanger.

AHS has undertaken extensive work over the past several years to build awareness and understanding among staff and physicians about the importance of appropriate access, safeguarding and encryption of patient information.

AHS takes the privacy and confidentiality of patient information seriously and all physicians and staff undertake privacy training.

AHS Legal and Privacy has advised the Office of the Information and Privacy Commissioner (OIPC) about this incident and will be working cooperatively with the OIPC on any upcoming investigations or undertakings.

To protect the confidentiality of the individuals impacted by this issue, AHS will not be releasing further information specific to this breach or the investigation. All affected patients are being contacted directly.

Alberta Health Services is the provincial health authority responsible for planning and delivering health supports and services for more than four million adults and children living in Alberta. Its mission is to provide a patient-focused, quality health system that is accessible and sustainable for all Albertans.

PreviousNext

CHT print [900×150]

CHT print [900x150]

News and Trends

  • NS improves care by deploying Command Centres
  • Panel identifies threats from faxes, snooping, cyber-attacks
  • Bringing portable X-ray imaging to Canada’s remote communities
  • In Ontario, real steps are being taken to reach EHR interoperability
  • Care-givers need improved technology to reduce stress in the LTC sector
More from the Print Edition

Subscribe

Subscribe

Free of charge to Canadian hospital managers and executives in nursing homes and home-care organizations. Learn More

Follow us on Social Media!

Follow us on Social Media!

Softworks

Softworks

Nihi Spring 2023

Nihi Spring 2023

Advertise with us

Advertise with us

Sectra [Feb]

Sectra [Feb]

Change Healthcare [2]

Change Healthcare [2]

Infoway [March2023]

Infoway [March2023]

Zebra [Mar2023]

Zebra [Mar2023]

RealTime

RealTime

CHT print [900×150]

CHT print [900x150]

Advertise with us

Advertise with us

Sectra [Feb]

Sectra [Feb]

Change Healthcare [2]

Change Healthcare [2]

Infoway [March2023]

Infoway [March2023]

Zebra [Mar2023]

Zebra [Mar2023]

RealTime

RealTime

Contact Us

Canadian Healthcare Technology
1118 Centre Street, Suite 207
Thornhill, Ontario, Canada L4J 7R9
Tel: 905-709-2330
Fax: 905-709-2258
info2@canhealth.com

  • Quick Links
    • Current Print Issue
    • Print Archive
    • Events
    • Vendors
    • About Us
  • Advertise
    • Publishing Schedule
    • Circulation
    • Unit Sizes and Rates
    • Mechanical Requirements
    • Electronic Advertising
    • White Papers
  • Subscribe
    • Print Edition
    • e-Messenger
    • White Papers
  • Resources
    • White Papers
    • Writers’ Guidelines
    • Privacy Policy
  • Topics
    • Administrative Solutions
    • Clinical Solutions
    • Companies
    • Continuing Care
    • Diagnostics
    • Education & Training
  •  
    • Electronic Records
    • Government & Policy
    • Infrastructure
    • Innovation
    • People
    • Privacy and Security

© 2023 Canadian Healthcare Technology

The content of Canadian Healthcare Technology is subject to copyright. Reproduction in whole or in part without prior written permission is strictly prohibited. Send all requests for permission to Jerry Zeidenberg, Publisher.

Search Site

Error: Enter a search term

  • Issues
    • Current Print Issue
    • Print Archive
  • Advertise
    • Publishing Schedule
    • Circulation
    • Unit Sizes and Rates
    • Mechanical Requirements
    • Electronic Advertising
    • White Papers
  • Subscribe
    • Print Edition
    • e-Messenger
    • White Papers
  • Events
  • Vendors
  • About Us