Canadian privacy & access decisions

A veteran complained that Veterans Affairs Canada (VAC) had inappropriately used and shared his sensitive medical information in briefing notes to the Minister, and had transferred his medical file to a VAC-administered hospital without his consent. The investigation found that the briefing notes contained excessive medical details and that sensitive information was shared widely within VAC without a need-to-know. The transfer of the medical file also occurred without the required consent. The complaint was found to be well-founded.

• Inappropriate use and disclosure of sensitive medical information in briefing notes.
• Transfer of personal medical information to a hospital without consent.
• Failure to limit access to personal information on a need-to-know basis.
• Compliance with section 7 of the Privacy Act regarding use of personal information.