Hey there, time traveller!

This article was published 14/11/2016 (1409 days ago), so information in it may no longer be current.

A former government worker peeked into private health records to find addresses for birthday cards and greetings she wanted to send.

Health Minister Kelvin Goertzen said Monday the department has wrapped up an internal investigation after discovering 197 health records were inappropriately accessed.

There was nothing "nefarious" about the information breach, Goertzen said, adding the worker has since "moved on" from her job.

A spokeswoman for the department confirmed the ex-employee used her access to private health records to find addresses for birthday cards.

The province also alerted Manitoba's ombudsman and directly contacted all 197 people whose information was accessed before the breach was made public.

"The department apologizes for this incident," a statement issued earlier in the day said.

Access to personal health information in Manitoba is strictly limited under provincial legislation. Under the Personal Health Information Act and the Health Department's policies and procedures, employees are authorized to access information only if it's "necessary to carry out their defined responsibilities," the statement said. In this case, the worker did not have legal access to the information. Penalties include a range of fines up to a maximum of $50,000. Even if a breach is not prosecuted, it may result in disciplinary action.

Provincial health-care databases include patient files with doctors' visits, medical diagnoses, medical billings, prescription drug records and hospitalizations.

The department has boosted its training to make department staff aware of their responsibilities to maintain the privacy of personal health information, the statement said.

The province urged individuals who are concerned their personal files may have been breached to contact the ombudsman directly.

"Every breach is concerning, Goertzen said. "People have the right to expect the personal information they give in a hospital or at a doctor's office will be exactly that, personal and private."

Goertzen, who was attending an event to mark Addictions Awareness Week, said the woman had been a longtime employee in the Health Department.

He said the breach was limited to the individuals names and addresses.

"My understanding of this particular breach is the information was being used, essentially for the addresses.... The person may have been looking to update their own personal address book."

The province disclosed the breach to caution government workers they can't use their positions to access private information.

"I don't believe there was a wish to harm anybody but that's not an excuse. But even persons who aren't doing things for bad reasons need to know that's a bad thing to do... you can't look at other people's information," Goertzen said.

alexandra.paul@freepress.mb.ca