The Complainant met their obligation to submit an access request in compliance with section 25. The IPC found that the Custodian did not meet its obligation to provide any supporting evidence as a basis for relying on paragraph 26 (2)(a) to extend the initial timeline of 30 days by an additional 60-day period. As such, the extension was invalid and the Custodian was deemed to have refused to provide the Complainant with the requested records at the expiry of the 30-day timeline.
Was a complainant's personal health information used, disclosed, stored, and accessed within HIPMA requirements?
An individual made a complaint to the Information and Privacy Commissioner alleging the Department used, disclosed, stored, and accessed their personal health information contrary to the requirements of the Health Information Privacy and Management Act (HIPMA).
Request to the Information and Privacy Commissioner for relief by disregarding seven access requests
Restricting an individual’s access to information rights should not be taken lightly and should only occur after careful consideration of all the facts. In this case, the IPC found that if the Department is required to process the Seven Requests, it will interfere with its operations because of their repetitious or systematic nature. Given this, and taking the facts into account, the IPC's decision is to authorize the Department to disregard these requests.
Materials related to communication and meetings between five department employees
The Applicant requested access to Department records pertaining to email, SMS messages, and/or meeting notes concerning the work performance or behaviour [of the Applicant] between four Department employees between Feb 1, 2017 and Nov 2, 2017.
Is the personal information of Yukon Government employees stored securely and disclosed to other departments appropriately?
On November 3, 2016, a Yukon Government (YG) employee complained that personal information collected about YG employees contained in the PeopleSoft Human Resources Management System (HRMS) was being disclosed by the Public Body to other YG public bodies contrary to the requirements of the Access to Information and Protection of Privacy Act and that this information was also not properly secured.
Collecting too much personal health information and then storing it securely?
The Complainant alleged that the Department was collecting more personal health information from his physician for the purposes of remunerating the physician for services rendered than allowed by HIPMA. Included in the complaint was an allegation that the Custodian did not have adequate security measures in place to protect the personal health information it collected.
Authority to disclose personal health information to a community health centre
The Yukon Hospital Corporation disclosed records containing a mother's and her child's personal health information contrary to HIPMA. The disclosure was made to a health centre in a community operated by the Department of Health and Social Services and was for the purpose of providing her and her newborn with at-home, follow-up health care after her discharge from Whitehorse General Hospital. The YHC submitted that it had authority to disclose the personal health information under subsection 58 (a) of HIPMA.
