Privacy Breach at Ontario Hospital Highlights Needs to Enforce Policies - Elyse Sunshine Comments

A privacy breach at a Scarborough hospital provides an important reminder to institutions to ensure that their privacy policies and practices are implemented and enforced. Commenting on the recent discovery that two hospital staff were alleged to have actually sold patient information to a private RESP company, Elyse Sunshine noted that while an institution cannot prevent the actions of rogue employees, it needs to take all reasonable steps to ensure that it not only has appropriate privacy policies in place, but that the institution actually follows through with those polices and develops a "culture of privacy".

Quoted in the Toronto Star, Elyse notes that this case is a real wake up call.