P.E.I. Workers Compensation Board reports 47 privacy breaches in 4 years

P.E.I.'s information and privacy commissioner is recommending changes to prevent breaches at the Workers Compensation Board after 47 breaches to personal privacy were reported in a four-year period.

Board says it will implement privacy commissioner's recommendations

P.E.I.'s privacy commissioner says the Workers Compensation Board wasn't meeting its legal obligations to protect personal information. (iStock)

P.E.I.'s information and privacy commissioner is recommending changes to prevent breaches at the Workers Compensation Board after 47 breaches to personal privacy were reported in a four-year period.

Privacy Commissioner Karen Rose started investigating after a WCB client complained in 2010 some of his medical information was mailed to an unrelated third party. The mistake was attributed to human error.

The same complainant later reported that he received someone else's personal information from WCB, something the agency again attributed to human error.

During the four years Rose investigated, the Workers Compensation Board reported 47 breaches of privacy — an average of one per month.

While Rose found the board had taken steps to prevent privacy breaches, she concluded they didn't go far enough and found the agency wasn't meeting its legal obligations to protect personal information.

Rose made a dozen recommendations for improvement, including:

  • Educating management and staff about best practices when collecting, using and disclosing personal information.
  • Establishing a privacy breach advisory committee that will meet regularly to share best practices and analyze errors.
  • Reporting to the privacy commissioner every six months for two years.

Rose also suggested the board apologize every time it notifies a worker their privacy has been breached. The agency did apologize in the case that sparked the investigation, although there's no set policy to do so.

In a written response to CBC News, the Workers Compensation Board said it's committed to the protection of privacy and will use the commissioner's recommendations to further enhance protection.

With files from CBC's Kerry Campbell

Comments

To encourage thoughtful and respectful conversations, first and last names will appear with each submission to CBC/Radio-Canada's online communities (except in children and youth-oriented communities). Pseudonyms will no longer be permitted.

By submitting a comment, you accept that CBC has the right to reproduce and publish that comment in whole or in part, in any manner CBC chooses. Please note that CBC does not endorse the opinions expressed in comments. Comments on this story are moderated according to our Submission Guidelines. Comments are welcome while open. We reserve the right to close comments at any time.