Government of Saskatchewan Information and Privacy Commissioner Ron Kruzeniski has published a report on his recent investigation into a University of Saskatchewan pharmacy student who inappropriately accessed the medical records of 114 people. The pharmacy owner reportedly dismissed the student upon discovering the situation and notified the Office of the Saskatchewan Information and Privacy Commissioner (OIPC). While OIPC praised some actions taken by the involved parties—such as sending a joint notification letter to affected individuals—it found that the parties failed to investigate the root causes of the breaches. Among OIPC’s recommendations, USask was advised to amend its Student Placement Agreement to clarify its responsibilities and expectations and ensure it has no role in providing access to the personal information viewing software.
