The Member, a registered nurse, faced allegations of professional misconduct for repeatedly sending patients' personal health information via unsecure standard email, accessing a patient's financial information without consent, and storing confidential patient information on an unsecure, unencrypted USB drive for several years.
The Member also posted an unauthorized memo that contradicted management's infection control instructions.
The Member admitted to the allegations.
The Discipline Committee found the Member committed professional misconduct and engaged in dishonourable and unprofessional conduct.
Accepting a joint submission on penalty, the Committee ordered a reprimand, a four-month suspension, and imposed terms, conditions, and limitations on the Member's certificate of registration, including meetings with a regulatory expert and employer notification.