As reported by the Toronto Star:
Shaida Bandali, a former clerk at Rouge Valley Centenary Hospital, was charged by the Ontario Securities Commission (OSC) with the “quasi-criminal” offence of “misusing” as many as 8,300 records, mostly of mothers who gave birth between 2009 and 2013. It’s the first time anyone has been charged in relation to a slew of privacy breaches revealed over recent months at numerous hospitals in the GTA...
She is accused of creating investor lists from the stolen records of new mothers, providing them to RESP dealers and receiving payment for this without informing the hospital or the patients, according to the OSC.
The answer, as my subsequent blog post will describe, may not be so straightforward.