Ombudsman to investigate disclosure of thousands of children's health information

An official advocate is starting an investigation into why approximately 9,000 private health records were released to service agencies and advocacy groups.

On August 26, a spreadsheet containing private information intending to be sent to Manitoba Advocate for Children and Youth (MACY) from Children’s Disability Services (CDS) was given to the wrong people. The Province says that the disclosure was unintentional. 

Children's' diagnoses and addresses were emailed to approximately 100 service agencies and community advocates. The spreadsheet contained the child’s name, gender, date of birth, address, the nature of their disability, and the child's medical or psychological assessment details. The private information did not include any financial information or personal health identification numbers, social insurance numbers. 

“Personal health information is some of our most sensitive and private information, and we entrust it to government for the purpose of receiving specific benefits or services,” Ombudsman Jill Perron says. “A privacy breach of personal health information can have significant impacts on the affected children and their families. A review of the privacy breach can help an organization strengthen privacy protection practices and adopt preventative measures that will help restore confidence in the program.”  

The spreadsheet was password-protected, but the password was given to the unintended recipients. The Government of Manitoba says the email was sent to the groups due to human error. The province says it has contacted those involved in the breach.

The Ombudsman says her office will reveal the circumstances of the break.

"As part of our review, we will ensure that the department takes all reasonable steps to respond to the breach and that it implements the necessary safeguards to protect the privacy of children and their families who receive services from CDS," the office says in a statement.

They are asking parents who have questions about the disclosed information to contact CDS program at 204-945-8900 or email ads@gov.mb.ca.

The Ombudsman says that those who wish to make a complaint with them regarding the leak to call them at 1-800-665-0531, visit their website, or send an email.