Collecting too much personal health information and then storing it securely?
The Complainant alleged that the Department was collecting more personal health information from his physician for the purposes of remunerating the physician for services rendered than allowed by HIPMA. Included in the complaint was an allegation that the Custodian did not have adequate security measures in place to protect the personal health information it collected.
Authority to disclose personal health information to a community health centre
The Yukon Hospital Corporation disclosed records containing a mother's and her child's personal health information contrary to HIPMA. The disclosure was made to a health centre in a community operated by the Department of Health and Social Services and was for the purpose of providing her and her newborn with at-home, follow-up health care after her discharge from Whitehorse General Hospital. The YHC submitted that it had authority to disclose the personal health information under subsection 58 (a) of HIPMA.
The issue for the continuation of the Inquiry is as follows: Do subsections 25 (1), together with 25 (2) or 25 (4), apply to the information separated or obliterated from the Additional Records?
Highly-sensitive personal information used or disclosed during grievance process
A Department employee made a complaint alleging the Department disclosed his personal information to his union representative and that this information was also disclosed to and used by an Assistant Deputy Minister (ADM) who was involved in the process.
The Applicant made a request to access survey records gathered from visitors to the Yukon in the summer of 2012 and the winter of 2012/2013.
The records contained information from over 4000 visitors, had over 700 columns, and more than two million fields of data.
Access to a video recorded in the Whitehorse Correctional Centre
The Applicant made a request to be provided with a copy of a video recorded during an incident at the Whitehorse Correctional Centre in which he was involved. The Applicant also asked for all written reports, digital reports and DVR relating to the incident.
The Applicant requested a review of a decision by the Department to sever a third party’s personal telephone number from a record requested under the Access to Information and Protection of Privacy Act.
The Information and Privacy Commissioner (IPC) investigated two complaints that claimed Whitehorse Correctional Centre (WCC) violated the Access to Information and Protection of Privacy Act (ATIPP Act). The Complainant alleged that WCC violated the ATIPP Act when it used an internal, informal process to manage his request for access to information written on an ATIPP Request form rather than the formal process set out in the ATIPP Act. The records he requested contained his own personal information, third party personal information, and non-personal information. The Complainant also alleged that WCC conducted an inadequate search for the photographs he requested.
