Privacy commissioner says doctors should move away from faxing patient referrals

Nova Scotia's privacy commissioner says the health authority should helpdoctors' offices move away fromfaxing patient referralsfollowing aninvestigation into whyconfidential mental health records weresent in error to a Bedford spa.

The investigation was initiated after CBC News contacted the privacy commission to inquire about the issue. Bedford businesswoman Lisa Belangerhad approached CBC News out of frustration, and estimated that over the last decade her spa had received dozensof faxes from doctors' offices that were supposed to go toa mental health clinic.

Belanger was concerned about the personal information on the documents. She said she had been repeatedly assured by health officials the problem would be fixed, but the faxes continued.

Privacy commissioner CatherineTullywrote in a report released Wednesday that momentary inattention and human error by those sending the faxesare to blame for the three cases her office examined.

Faxes contained sensitiveinformation

Tully noted the faxes included "highly sensitive" information, including the patient's name, detailed health information, the doctor's initial diagnosisand the challenges they faced because of the condition.

Tully saidif the information hadended up in the hands of someone who knew the patient, the harm would be "close to irreparable."

The report found the likelihood of theerror occurring again is heightened by the fact the fax numbers of the spa and the Bedford-Sackville Mental Health Clinic are identical except for one number.

Tully said the problem of faxes sent in error will not go away, but hopes her report will prompt the health-care professionals involvedto revisit their faxing practices.

Best practices for doctors

One of the recommendations is for the Nova Scotia Health Authority to develop an electronic referral system.

Tully also recommends one person at each office be responsible for sending and receiving faxes, and that doctors preset the mental health clinic's number, review it every two years, and develop a systematic approach for sending faxes that is communicated to all staff.

The report says doctors notified each of the patientswhose privacy was breached.