H2020-ND-01

Alberta Health Services (AHS) notified the OIPC about an unauthorized disclosure of individually identifying health information under sections 60.1(2) and 60.1(3)(a) of HIA. In its breach report, AHS said that it would not be giving notice to the individual who is the subject of the individually identifying health information, as required by section 60.1(5) of the HIA. As provided by section 85.1(2)(a) of the HIA, the Commissioner confirmed AHS’s decision not to give notice to the individual who was the subject of the individually identifying health information.