PT Fired for Accessing Family’s Patient Records

The Case  

The College received a mandatory report from a senior administrator at a large hospital. The administrator said a physiotherapist working at the facility had been fired after an investigation found they used internal hospital software to access the personal health information of family members.  

The hospital first learned of the breach through a random audit. 

The physiotherapist had signed confidentiality agreements and completed yearly education on privacy obligations. But when their spouse was undergoing surgery, the PT claimed they forgot the proper procedures and accessed their partner’s patient records. 

On another occasion, the physiotherapist accessed the patient records of their child without authorization.  

In their submissions to the College, the physiotherapist expressed deep regret for their actions and outlined the steps they would take to ensure it never happened again.  

The Rules 

Personal health information is protected by law in Ontario. 

Even if the information relates to a practitioner’s own family members, deliberate, unauthorized access raises serious legal and ethical issues.   

Healthcare professionals are entrusted with safeguarding personal health information. Breaching the privacy of that information erodes public trust.  

Sometimes called “snooping,” accessing patient records without consent or authorization can cost healthcare practitioners their careers and even result in fines or lawsuits.  

The Outcome 

In reaching their decision, the Inquiries, Complaints and Reports Committee considered the physiotherapist had already paid a high personal price for their actions, having lost their job at the hospital. The physiotherapist also expressed remorse, suggesting they were unlikely to engage in similar conduct in the future.  

The committee decided to issue the physiotherapist a caution. Notice of the caution will be posted to the Public Register.