HEALTH DATA ON STOLEN COMPUTER CONTAINED NO NAMES

Released on April 12, 2006

A laptop computer stolen from the offices of a supplier contracted by Saskatchewan Health Information Network (SHIN) contained records supplied by the provincial agency. However, the records were "de-identified", meaning that they contained no names or any other information that could identify a person.

SHIN is an agency of Saskatchewan Health.

Praxia Information Intelligence Inc. was developing and testing a new system to analyze long-term care client assessment data to produce aggregate reports. This new system will enable the department and health regions to better manage continuing care services for Saskatchewan residents and to plan for future program enhancements. The laptop computer contained a test subset of data from the Heartland and Regina Qu'Appelle Health Regions, amounting to approximately 1,500 records.

The computer was one of three laptops stolen from a locked cabinet in Praxia's Toronto office sometime between 5:30 p.m. Thursday, March 30th and 9:00 a.m. Friday, March 31st. A second business in the same building was also broken into that evening.

Upon learning of the theft, Saskatchewan Health immediately met with the Information and Privacy Commissioner to discuss the matter and outline remedial actions being undertaken; the Commissioner concurred with the planned approach. A letter was then sent to Praxia to clarify details of the computer equipment theft and to ascertain any risks of a personal privacy breach. The department has received full co-operation from Praxia and believes that Praxia has appropriate security procedures in place. Praxia also initiated the required police investigation.

Based on the fact that the data contained no names, that the health registration numbers were heavily encrypted, the computer and its contents password protected, and that very strong security measures were in place to protect anyone from compiling the files into anything coherent, Saskatchewan Health has concluded that individual notification was not warranted. However, the theft is being publicly disclosed in the interests of transparency and accountability.

"We consider health data to be highly sensitive and always take measures to protect the privacy of the residents of Saskatchewan," SHIN Chief Executive Officer Neil Gardner said.

NOTE: For Heartland or Regina Qu'Appelle long-term care residents between 2003 and 2005 with privacy questions only, contact Ann Guinchard, Privacy Officer, Saskatchewan Health, Regina Phone: (306) 787-3160.

-30-

For More Information, Contact:

Jocelyn Argue Saskatchewan Health Regina Phone: (306) 787-4083

Dan Gordon, Ph.D. President, Praxia Information Intelligence Toronto Phone: (416) 778-7335