Police charge hospital workers for EHR breaches

TORONTO – Over the course of the past year, the Ontario Provincial Police (OPP) Anti-Rackets Branch – Health Fraud Investigation Unit (HFIU) has charged three former employees of Ontario hospitals following investigations into allegations of inappropriate access of electronic medical records related to the Personal Health Information Protection Act (PHIPA).

In three unrelated incidents, the OPP became aware of complaints where employees had accessed personal health information of patients attending the hospital who were:

• not part of their circle of care;
• accessed more than was reasonably required to complete their duties; and/or
• accessed information after their role in the patient’s care was complete.

The incidents took place in hospitals located in western, eastern and northern Ontario.

Following the investigations, the OPP laid charges under the PHIPA.

Offences under PHIPA can carry a maximum penalty of $200,000 and up to one year in prison.

The OPP-HFIU investigates criminal and provincial offences involving the payment and delivery of healthcare services and products. If you suspect healthcare-related fraud or other offences, please call the Ministry of Health at 1-888-781-5556 or email at reportohipfraud.moh@ontario.ca.

Should you wish to remain anonymous, contact Crime Stoppers at 1-800-222-TIPS (8477) or ontariocrimestoppers.ca.

The Information and Privacy Commissioner issued a report earlier this year that talked about a 34 percent increase in “snooping” cases. Read that report here.