Privacy commissioner: misdirected faxes with health infomation still a problem
After highlighting similar issues in a 2010 report, the Saskatchewan Information and Privacy Commissioner is once again pointing out breaches seen in the province when faxing personal health information.
"The information report deals with misdirected faxes involving Saskatchewan health trustees," said Gary Dickson Thursday morning. Around 1,000 patients in Saskatchewan were affected within the last few years.
There were 20 different investigation files alone in 2013 on these misdirected faxes, many of which can be attributed to things like misdialing the fax number, having the wrong fax number on file, or sending to the wrong person because of an auto-select option.
"(The information) becomes available to somebody who had no legitimate need to see that or read that information," Dickson continued.
Sadly, these are issues Dickson had already highlighted for the most part in a 2010 report on 'Systemic Issues with faxing Personal Information'. At that time, Dickson laid out recommendations on the actual procedure of faxing health information and what to do if that information is breached.
"In the course of this (2014) report, we've dealt with a number of physicians. It's interesting the response you get sometimes; people never heard of the 2010 report. They've never seen any of the guidance documents on our website. They profess to have no idea how to do an internal investigation when there's been a breach."
Dickson said only six of the 31 trustees the investigation dealt with ever identified the cause of the misdirected fax. Further, only 70 per cent of the patients whose information was breached were given notice.
In the 2010 report, Dickson had given hope to the idea that the transition to more electronic files would avoid breaches associated with faxing. However, human error may play too large a factor in it.
"If we're careless with a primitive fax machines, why would we think just because we're using technology that the carelessness isn't a factor anymore?"
While Dickson's role is to offer advice, he said it's up to elected officials and the government to play a role in remedying this continued problem.
"In other provinces where there are similar laws (to Saskatchewan's Health Information Protection Act), it's the health ministry that produces a comprehensive manual (with) checklists, guidance documents, FAQ's, case studies and things like that. That's missing in our province."
Dickson doesn't see a reason why Saskatchewan can't base its own set of guidelines off those of other provinces.