The province’s privacy commissioner is probing a major privacy breach at Rouge Valley Centenary hospital after patients’ personal information was handed over to private companies selling Registered Education Savings Plans.
According to a spokesperson at Rouge Valley Centenary Hospital, two former hospital employees provided the names, addresses and phone number of as many as 8300 patients to the companies. The majority of the patients were new mothers, many of whom were contacted by the companies who were trying to sell RESPs.
Hospital management learned of the privacy breach in October of last year after one of the employees involved in the scam came forward. The hospital alerted patients in December of 2013, but during further investigation realized the second employee was involved. An additional 700 patients were contacted last month.
While the hospital chose not to go to the police, the Privacy Commissioner and Ontario Securities Commission are both investigating.