Canberra Health Services admits to health record privacy breach of 13 patients

Canberra Health Services has revealed to its staff a massive privacy breach of multiple patients after it was found health records were shared outside of the organisation.

Canberra Hospital. Picture: Google Maps

The Canberra Health Services chief executive has revealed multiple patients had the privacy of their health records breached over a number of years.

In an email to staff by Dave Peffers, it was stated records were sent to multiple people within one of their industrials partners without consent.

Mr Peffer said the documents were “whole clinical records, in some cases scanned from hard copy and deliberately emailed to individuals outside the organisation”.

He said this breached the privacy of 13 consumers over a number of years.

The email goes on to explain “breaches like these don't just have implications for the ongoing employment of those involved, it’s unlawful conduct that carries heavy criminal penalties”.

Shadow Minister Health Leanne Castley said the email was of great concern and the minister must answer questions about the significant privacy breach of patients.

Shadow Minister for Health Leanne Castley. Picture: Facebook

“If the breach is serious enough for the CEO to inform employees within CHS then Canberrans, many of whom would have their information held by the hospital, deserve to be made aware as well,” Ms Castley said.

Member for Murrumbidgee Emma Davidson. Picture: Facebook

“Patients want to have confidence that their data is managed in a safe and responsible way, and they have the right to be notified after a discovery that there have been data compromises,” Ms Castley said.

Minister Emma Davidson said the health service treated any potential breach very seriously.

“I have been assured that once the privacy breaches were uncovered, CHS acted swiftly and appropriately to address this distressing incident,” Ms Davidson said.

“CHS has assured me that staff involved have no further access to confidential information. This incident involved a small number of staff.”

Ms Davidson said preserving patient confidentiality was a key part of team members’ registration as health professionals.

“We’ll be able to offer the public more information once due process and the external investigation has conclude,” she said.

“Until then, I am unable to provide any further specifics on this matter as it is the subject of an external investigation which I have no plans to run commentary on.”