The local health unit says there was a privacy breach in relation to its online COVID-19 dashboard.
"The dashboard contained information related to the number of COVID-19 tests and confirmed cases in the local community. Inadvertently, personal identifying information was made accessible through the dashboard" says a news release.
A member of the public reported the breach to the Health Unit.
"The likelihood of someone else having accessed the information is quite low, because it was not immediately visible and accessing it required a number of steps that were not obvious," continues the release.
“Our team has been working around the clock to ensure our community is safe, cared for, and has access to accurate and timely information as we collectively battle COVID-19. We also take very seriously our obligation to respect and maintain individual privacy. This mistake should not have happened, and I am very sorry it did,” said Dr. Jim Chirico, Medical Officer of Health.
Information that was accidentally made accessible was first and last name, municipality, unique identifying number, testing date and location, and the test result It may also have included a telephone number.
"There was no other health, financial, or personal information accessible through our dashboard. The dashboard has since been removed from the Health Unit’s website," says the release.
After the Health Unit was made aware of this issue, it immediately removed the information from its website and launched an investigation. The privacy breach affects those individuals whose permanent address is in the Health Unit district and were tested for COVID-19 on or before May 8, 2020.
“We are reviewing our training and quality processes to ensure such mistakes do not happen again,” continued Dr. Chirico.
Those affected will be notified by telephone or mail. The incident has also been reported to the appropriate authorities, including the Information and Privacy Commissioner of Ontario.
