title: Lessons learned from a privacy breach at an academic health science centre.
abstract: In 2007, the Hospital for Sick Children experienced a serious privacy breach when a laptop computer containing the personal health information of approximately 3,000 patients and research subjects was stolen from a physician-researcher's vehicle. This incident was reported to the information and privacy commissioner of Ontario (IPC). The IPC issued an order that required the hospital to examine and revise its policies, practices and research protocols related to the protection of personal health information and to educate staff on privacy-related matters.
authors.affiliation: Department of Quality and Risk Management, The Hospital for Sick Children, University of Toronto.
authors.forename: Jacqueline
authors.initials: J
authors.lastname: Malonda
authors.forename: Janice
authors.initials: J
authors.lastname: Campbell
authors.forename: Daniela
authors.initials: D
authors.lastname: Crivianu-Gaita
authors.forename: Melvin H
authors.initials: MH
authors.lastname: Freedman
authors.forename: Polly
authors.initials: P
authors.lastname: Stevens
authors.forename: Ronald M
authors.initials: RM
authors.lastname: Laxer
mesh_terms: D000046:Academic Medical Centers; D016494:Computer Security; D003219:Confidentiality / Q000331:legislation & jurisprudence; D006776:Hospitals, Pediatric; D016347:Medical Records Systems, Computerized; D009864:Ontario; D019982:Organizational Case Studies; D013800:Theft / Q000517:prevention & control*