Auditor general says personal health information not properly secured by WRHA

Manitoba’s auditor general said personal health information on electronic devices is not properly secured by the Winnipeg Regional Health Authority.

An audit found the WRHA was not identifying risks to the information accessed by laptops, smart phones and tablets and that there were significant weaknesses in the authority’s cybersecurity controls.

“Because of these significant cybersecurity control weaknesses, the WRHA was unnecessarily vulnerable to personal health information falling into the wrong hands,” said Auditor General Norm Ricard in a statement.

The report contains 12 recommendations for the WRHA and the health and healthy living departments.

The health authority and Manitoba's Health Department say they accept the report and are working on implementing its recommendations for stricter security.

- with files from The Canadian Press

• 

  An audit found the WRHA was not identifying risks to the information accessed by laptops, smart phones and tablets and that there were significant weaknesses in the authority’s cybersecurity controls. (File)