After latest health privacy breaches, N.S. woman speaks out about her experience

Carley Kynock-Bythewaysays she was appalled when she heard who had been snooping in her medical files.

"I was very upset. I was horrified," said the mother from Hammonds Plains, N.S."A million questions then start coming into your head, like, what did she see? What did she do?"

Nova Scotia Health admitted in early August that two medical clerks had improperly accessed the medical records of 211 patients at two Nova Scotia hospitals.

Kynock-Bytheway'sbreach was never made public.

It involved a medical transcriptionist based in Halifax who improperly viewed medical records of 60 different patients in 2018 and 2019.

Kynock-Bythewayis speaking out after reading news reports of otherbreaches.

"If it keeps happening, I'm wondering, is this going to happen again?" she said.

'I definitely felt violated'

Kynock-Bythewaywas informed of her breach by mail in August of 2019. She then phoned a privacy officer with Nova Scotia Health who told her further details, including the name of the employee who accessed her files, and the fact that she had been terminated from her position.

Kynock-Bythewaysaidshe recognized the medical transcriptionist's name right away it was her ex's new partner.

"It meant that my ex's girlfriend had been reading my medical files. I remember I had a big reaction on the phone with the woman who I called," Kynock-Bythewaysaid.

She was told that the transcriptionist had accessed her medical files electronically while working from home, often shortly after her medical appointments.

"[She]had been viewing them within, I believe, 12 hours to two to three days after I had them," Kynock-Bythewaysaid. "So I felt a bit stalked, that she'd known where I was and where I had been shortly after I'd been there. It was very disconcerting. I definitely felt violated."

Nova Scotia Health sent her a printout of every record the transcriptionist looked at.It contained a list of 291 records, including X-rays, blood work, psychological reportsand doctors' notes.

"She viewed private and sensitive information that she has no business to see," Kynock-Bythewaysaid.

Family and close friend also targeted

She saidNova Scotia Health would not identify the other breach victims, but she said her mother and brother both received letters informing them of similar privacy violations.

So did Kynock-Bytheway's close friend Carla Munroe, who also lives in Hammonds Plains.

"I've been victimized.There's no recourse for me.I just have to live with that in hopes that she is not going to share this information. And it's pretty scary to think of the things people could have access to," Munroe said.

Munroe saidthe same transcriptionist viewed records of Munroe's cancer treatments, which included test resultsand conversations with her doctors about her mental state.

"I wanted to speak out just to let people know that this is something that is happening. There were almost 60 people involved in this particular breach.... and I don't see any changes being made," Munroe said.

"There's no internal policies that have changed or procedures that may protect somebody else in this situation."

Nova Scotia Health responds

Health officials cannot speak to details of Kynock-Bytheway'sbreach, but can confirm it took place.

"We can verify that 60 notification letters went out between August and September 2019 regarding privacy breaches that involved a single employee who no longer works for Nova Scotia Health," Nova Scotia Health spokesperson Brendan Elliott said in an email.

Elliot saidthe matter has been referred to the province's Information and privacy commissioner.

"We won't be commenting on the case while it's under review," he said.

CBC News reached out to the former employee responsible for the breach, but she declined to comment.

Meanwhile, Kynock-Bytheway wantsto see Nova Scotia Health make meaningful change in policies and systems to prevent future breaches.

"They're obviously not doing enough auditing," she said, pointing to the fact her files were unnecessarily accessed for more than a year.

"Maybe they need to update or implement a new system.... You'd think something could happen to prevent this from continuing," she said.

MORE TOP STORIES