Skip to content

Heatlh PEI Privacy Breach Lawsuit

File #SI-GS-29657

Share this...
Share on facebook
Facebook
Share on twitter
Twitter
Share on email
Email
Share on whatsapp
Whatsapp
Share on print
Print
Menu
  • Timeline
  • Statement of Claim
    • Amended Statement of Claim
    • Original Statement of Claim
  • Statement of Defence
    • Amended Statement of Defence (Health PEI)
    • Statement of Defence – Kevin J Arsenault
    • Original Statement of Defence – Health PEI
  • Documents
  • In the News
  • Contact Us
Menu
Health Pei - Privacy Breach

Timeline

2021

Arrived to PEI

April 4, 2021

Barry (my husband) and I spent the winter season in Ontario and then returned to Prince Edward Island to enjoy the summer at our home there. We have been highly vigilant regarding COVID-19 and made the decision to drive directly to our destination without stopping at a hotel in order to minimize potential exposure.

Feeling unwell

April 7, 2021

A few days after our arrival, I began to feel unwell and developed a persistent high fever that would not subside. Since my husband Barry was feeling well, I initially assumed my symptoms were simply due to exhaustion from the travel.

Covid-19 test results: positive

April 10, 2021

We both underwent COVID-19 testing, and the results confirmed positive diagnoses for each of us.

Shortness of Breath

April 12, 2021

We visited the Emergency Department in Charlottetown due to my shortness of breath. After assessing my condition, the medical team found my blood oxygen levels to be satisfactory, and I was subsequently discharged to recover at home.

Difficulty Breathing

April 14, 2021

Due to my difficulty breathing again, we called an ambulance. The paramedic suggested that it was likely a panic attack; however, to ensure my safety, they provided me with an oxygen monitor and advised me to check my blood oxygen levels regularly. This monitor transmitted data directly to them, allowing them to monitor my readings in real time.

Admitted to QEH

April 16, 2021

An ambulance was dispatched after my oximeter indicated that my blood oxygen levels had dropped to a dangerously low level. I was transported to the Queen Elizabeth Hospital (QEH) for further evaluation and care.

Unit 3

April 16, 2021

I was admitted to the hospital and subsequently transferred to Unit 3 where I was placed on supplemental oxygen.

ICU

April 17, 2021

The day after my admission to Unit 3 I was transferred to the ICU for closer monitoring. First I was on supplemental oxygen and then transitioned to high-pressure air to assist with my breathing.

Back to Unit 3

April 20, 2021

I was transferred back to Unit 3 for continued care and monitoring.

Privacy Breach Notification

April 21, 2021

Finally, the hospital permitted my husband, Barry, to visit. During his visit, Lynn Drake, the nurse manager of Unit 3, informed us of a privacy breach that occurred while I was in the ICU, revealing that my medical history had been posted on Facebook. She provided us with a printout containing screenshots of the original Facebook post and correspondence between Kevin J. Arsenault and an unidentified individual (PDF: Original post | PDF: Original post-enhanced). Lynn also indicated that the hospital had initiated an internal investigation to identify the nurse responsible for leaking the information and had notified the Privacy Commissioner’s office.

Revised post

April 21, 2021

I searched for the original post on Facebook, but by that time, it had been replaced with a new post (dated April 17) that did not include the original communication. Instead, it solely reported my HIV status and included Kevin J. Arsenault’s opinions on HIV and COVID.

This post is still available at:

https://www.facebook.com/
permalink.php?story_fbid=10165044238680858&
id=542615857

PDF: revised post

PDF: comments and shares

PDF: edit history of the post

Discarhed from QEH

April 23, 2021

I was released from the hospital.

Rumours and Gossip

April 21, 2021

Barry began receiving calls from individuals seeking to confirm whether I was the one hospitalized. Rumors circulated suggesting that I was the person mentioned in the blog.

At that time, I was the first and only patient in the hospital with COVID-19, and the only one transferred to the ICU, making it relatively easy to identify me.

Contact by facebook

Update from QEH (Lynne Drake)

April 27, 2021

Lynn Drake confirmed that the communications office had reached out to Kevin J. Arsenault last week, requesting the removal of the post. She also spoke with the privacy manager at the hospital, although she was uncertain whether the post had been taken down.

She provided us with the name of the director of privacy at Health PEI: Jeanne MacDougall. Additionally, she mentioned that the investigation would include inquiries into who accessed my medical records.

We asked Health PEI and QEH to identify those responsible for the breach and hold them accountable.

Update from QEH (Jeanne MacDougall)

April 27, 2021

Jeanne MacDougall returned our call and informed us that the privacy commissioner had been notified and was actively investigating the matter. She mentioned that they were reviewing my chart to determine who accessed my file and the duration of their access. She offered to send us the report once it was completed.

Additionally, she advised that since the Facebook post is still online and Kevin J. Arsenault has been unresponsive to their requests for communication, we should consider contacting the police to assist in having it removed.

Facebook Request

April 27, 2021

I requested that Facebook remove the post, but they declined, stating that it did not violate their policies.

Chart Access Report QEH

April 27, 2021

Jeanne MacDougall contacted me via email to inform me that the report has been completed. She requested to open a secure communication portal to facilitate the transmission of the document.

Police Report

May 1, 2021

We went to the police to file a report and request the removal of the post.

We spoke with Cpl. Bill Almon, who took our statements and opened a case file (File # 588444-21). He informed us that they would attempt to locate Kevin J. Arsenault either by phone or through a visit. Additionally, he mentioned that this case might be escalated and assigned to a detective on Monday.

Kevin J. Arsenault

May 2, 2021

We conducted our own research to locate Kevin J. Arsenault and discovered that he resides in Fort Augustus, PEI. We also found that he ran for the leadership of the PC party in 2018.

X: https://x.com/KevinJArsenault
Facebook: https://www.facebook.com/profile.php?id=542615857
website: https://kevinjarsenault.com/

He is a well-known figure in both political and religious circles on Prince Edward Island.

Chart Access Report QEH

May 3, 2021

I received the audit report from the hospital, which details everyone who accessed my electronic chart during my stay.

 

Call with the Police

May 4, 2021

I spoke with Corporal Bill Almon, who informed me that he contacted Kevin J. Arsenault. However, Mr. Arsenault has not been cooperative, and Corporal Almon does not anticipate that he will remove the post in question.

New post – Kevin J Arsenaul

May 5, 2021

Kevin J. Arsenault has published a new blog post on Facebook regarding the police call, which includes a transcript of the call.

https://www.facebook.com/permalink.php?story_fbid=10165109871805858&id=542615857

PDF: Blogger’s post after the police call

PDF: Blogger’s transcript of the police call

Update from QEH (Jeanne MacDougall)

May 26

We followed up with Jeanne MacDougall by phone regarding the progress of my file. She informed us that the hospital contacted Facebook to request the removal of the post; however, Facebook does not consider this a violation of their privacy agreement, and therefore did not remove it.

The hospital has provided a more detailed audit report to the managers of each unit (Emergency Room, Unit 3, and ICU) to determine if there are any individuals on their access list who should not have access to my file.

They confirmed that all access was deemed appropriate. However, Jeanne mentioned that one individual accessed my file on the evening of April 16, despite the fact that I was not her patient. They are conducting further investigation regarding this person (Breach #2).

Additionally, they are performing a person-of-interest audit related to another hospitalized patient under the age of 10.

I shared our efforts to narrow down the list and explained the different criteria we used to eliminate individuals, noting that the person we are looking for may not necessarily be someone who should not have access. The original post by Kevin J. Arsenault indicated that the source was a nurse who directly cared for me, suggesting that this individual should be on the access list.

Update from QEH (Jeanne MacDougall)

June 2, 2021

I followed up with Jeanne MacDougall by phone. She informed me that the individual identified as accessing my file outside the scope of her job has been referred to Human Resources for disciplinary action. Jeanne will follow up with HR to see if they can disclose the individual’s name. When she was asked about the Facebook post by Kevin J. Arsenault, she denied knowledge of it.

Jeanne confirmed that the investigation is nearing completion; however, they do not anticipate naming anyone as a result of the investigation.

We inquired whether the hospital had considered obtaining information from Kevin J. Arsenault, but they do not view this as a feasible option. We also asked if they would contemplate legal action against Mr. Arsenault, and she stated that she would need to consult with the CEO and legal department regarding this matter.

We expressed our frustration and disappointment with the progress of the investigation. Additionally, we mentioned that we have yet to receive any communication from the Privacy Commissioner’s office. Jeanne was surprised by this and will follow up with them to determine if they are willing or able to initiate legal action against Mr. Arsenault.

Since it seems likely that no individuals will be named at the conclusion of the investigation, she asked what further expectations we have and how else they might assist in resolving this issue. We indicated that we would need to discuss this internally and would follow up with her next week.

Notice of Privacy Breach

June 4, 2021

I have received the official notice regarding the Privacy Breach (Breach #1).

PDF: Notice of Privacy Breach: BRH-21-031

Chart Access update (Breach #2)

June 14, 2021

I have received the updated audit report, which highlights the name of the nurse who accessed my file while not involved in my care.

Decided to move

June 2021

We have decided to list our home on Prince Edward Island, as it has become increasingly uncomfortable to remain there following this incident.

Unfortunately, there is still a stigma associated with HIV on PEI, and the resulting gossip has made it difficult to maintain a quiet and private life.

We conducted interviews with several real estate agents to assess the value of our home and to determine who would best represent us in the sale.

Apprasials

June 25, 2021

We have received the appraisal prices from multiple real estate agents.

Final report (QEH)

June 30, 2021

The hospital’s investigation has been completed, and the final report has been received.

PDF: Privacy Breach Report

Follow up from QEH

July 15, 2021

Jeanne MacDougall has followed up via email regarding our thoughts on the investigation report. We conveyed our disappointment with its findings.

Listed our Home

August 15, 2021

Our home listing has gone online. Given my expertise in web design, I created a dedicated website to assist with the sale of our property.

Property website: https://64rte13.com

A trip to the ER (QEH) – More Privacy Issues

September 2, 2021

On September 2nd, we had to visit the emergency room due to a reaction to my medication for an ear infection. The wait was very long, and we observed several privacy breaches during our time there.

Intake charts were left unattended in a folder outside the nurse’s station. To our astonishment, we witnessed another patient remove them and read through the documents without anyone questioning her. Barry approached one of the nurses, who then took the charts inside; however, within an hour, they were back outside again.

Additionally, the intake nurses and staff did not consistently close the doors while interacting with patients, allowing individuals in the waiting room to overhear conversations.

When I finally saw the doctor, I was in the room used for EKGs, which is adjacent to the nurse’s station. The only barrier was a curtain, which allowed anyone nearby to hear all conversations between patients and intake nurses.

Notify QEH of privacy issues

September 16, 2021

I sent an email to Jeanne MacDougall outlining the privacy concerns we observed while waiting in the emergency room. In the email, we also included some straightforward solutions to address these issues.

QEH of privacy issues – response

September 17, 2021

I heard back from Jeanne MacDougall, who informed us that she has forwarded our email to the emergency room department.

Price Reduction

October 18, 2021

We adjusted the property price downward to accelerate the sale and help us move on from our experience in Prince Edward Island.

Offer

October 25, 2021

We received an offer on the home and accepted it.

Move to Ontario

November 14, 2021

Since the final condition of the offer was met, we decided to pack up and leave early. We hired individuals to oversee the house until the closing date, ensuring that everything remained in order.

Closing date

December 15, 2021

The sale of the home on Prince Edward Island has been completed.

[bold_timeline_item_button title=”Expand” style=”” shape=”” color=”” size=”inline” url=”#” el_class=”bold_timeline_group_button”]

2022

Investigation Summary

January 27, 2022

Received the summary of the investigation from the Office of the Privacy Commissioner.

PDF: investigation summary

Legal Action

March 3, 2022

Since neither the QEH investigation nor the Office of the Privacy Commissioner assigned accountability, we decided to retain legal counsel.

We contacted Cox and Palmer, with whom we had worked on multiple occasions for both personal and business matters while in PEI. However, they indicated that representing us would constitute a conflict of interest.

As a result, we sought representation off-island and retained Spark Law in Toronto.

Lawsuit filed

April 21, 2022

We provided Health PEI with an opportunity to respond to our intent to file suit. Unfortunately, Health PEI was not cooperative in reaching a resolution regarding the privacy breach. As a result, we have formally filed suit seeking compensation for the damages incurred.

PDF: Statement of claim

In the News

April 22, 2022

The lawsuit sparked news attention, and was reported both locally and nationally.

CBC News    PDF: CBC News

The Canadian News     PDF: The Canadian News

CBC news report April 29, 2022

Statment of Defence

May 24, 2022

Received the Statement of Defence from Health PEI.

PDF: Statement of Defence

Conflict of Interest

May 27, 2022

After receiving the Statement of Defence, we noted that Health PEI’s attorney was Cox and Palmer. Given that Cox and Palmer previously represented us in the sale of our home, which was directly related to the matter at hand, we requested that they recuse themselves from representing Health PEI due to a conflict of interest.

However, our request was denied.

PDF: Letter to Mr. Forbes

3rd PRIVACY BREACH

June 2, 2022

I received a letter from Health PEI, dated May 31, 2022, notifying me that my privacy had been breached again.

The letter states:

“On April 5, 2022, a Health PEI laptop computer was stolen from an employee‘s vehicle. The laptop contained information about patient visits to Emergency Departments at PEI hospitals. This included the following information about you:

  • Demographic information, including your name, date of birth, health card number, gender and postal code; and
  • Information about your visit(s) to the Emergency Department(s) between the dates of September 1, 2021 and October 13, 2021, including the reason for your visit, your diagnosis and the name of the physician(s) who treated you.”

PDF: Notice of privacy breach: BRH–22–040 

3rd PRIVACY BREACH – request for more information

June 8, 2022

To determine the specific information that was compromised, I contacted Health PEI to request further details.

3rd PRIVACY BREACH – breach details

June 9, 2022

I received the details regarding the information that was compromised. As noted in the original letter, the data included my full name, postal code, date of birth, health card number, arrival and discharge times, family doctor information, the attending doctor’s name, the reason for my visit, the triage level, my diagnosis, and various tracking and internal ID numbers.

I was surprised to read that my reaction to the ear infection medication, which included a racing heart and skipped beats, was simply diagnosed as “fatigue.”

1st Privacy Breach Investigation – Order

August 16, 2022

Received the final order from the Office of the Privacy Commissioner.

PDF: Order No. HI-22-001

Case Conference

August 24, 2022

Case Conference

November 23, 2022

[bold_timeline_item_button title=”Expand” style=”” shape=”” color=”” size=”inline” url=”#” el_class=”bold_timeline_group_button”]

2023

Amended Claim

March 1, 2023

Justice Campbell granted an amendment to our claim to include Kevin J. Arsenault as a defendant in the proceedings.

He has 30 days to submit a Statement of Defence to the court, and Health PEI now has 30 days to either amend or withdraw their defence.

PDF: Issued Order – Justice Campbell – 01-MAR-2023

Amended Statement of Claim

PDF:  Amended Statement of Claim – 01-MAR-2023

Amended Statement of Defence (Health PEI)

March 31, 2023

Health PEI has submitted their amended Statement of Defence.

PDF: Amended Statement of Defence of the defendant – Health PEI

Statement of Defence (Kevin J Arsenault)

May 3, 2023

Kehin J. Arsenault has submitted his statement of defence.

PDF: Statement of Defence of the defendant – Kevin J Arsenault

Case Conference

October 25, 2023

[bold_timeline_item_button title=”Expand” style=”” shape=”” color=”” size=”inline” url=”#” el_class=”bold_timeline_group_button”]

2024

Case Conference

April 15, 2024

Examinations for Discovery

October 15 – 17

[bold_timeline_item_button title=”Expand” style=”” shape=”” color=”” size=”inline” url=”#” el_class=”bold_timeline_group_button”]
Share this...
Share on facebook
Facebook
Share on twitter
Twitter
Share on email
Email
Share on whatsapp
Whatsapp
Share on print
Print

In the News

  • CBC News
    June 1, 2022
    Breach #3
  • The Toronto Star
    June 1, 2022
    Breach #3
  • PrinceEdwardIsland.ca
    June 1, 2022
    Breach #3
  • Reddit.com
    May 1, 2022
    Breach #1
  • The Canadian News
    April 30, 2022
    Breach #1
  • CBC News
    April 27, 2022
    Breach #1

Paintiff

Gyorgy Kiss

Defendents

Health PEI
Kevin J. Arsenault

Contact Us

[wpforms id="340" title="false"]
©2025 Heatlh PEI Privacy Breach Lawsuit | Design: Newspaperly WordPress Theme