Privacy breach found after CPR instructor takes class to cardiac arrest call in rural Sask.

The Information and Privacy Commissioner (IPC) is recommending more privacy training for Saskatchewan Health Authority (SHA) volunteers after a CPR instructor and volunteer medical first responder took her class to a call at a private home.

Aninvestigation report by the IPC shows paramedics were called to a ruralresidence in southern Saskatchewan on March 18, 2018, for someone who went into cardiac arrest.

• Privacy commissioner hopes to protect personal info, but ease access for citizens

• Doctors snooped on Humboldt Broncos' records, privacy commissioner finds

The instructor in question,who the report doesn't name, is a volunteer with the SHA as a medical first responder and was registered as a non-practising emergency medical responderwith the Saskatchewan College of Paramedics (SCoP).

She was teaching a CPR re-certification classto three adult students none of whom were employed by the SHA when SHAsent thecall to its emergency responders, includingthe instructor.

Patient declared dead on scene

A report by SCoP says the instructor's "immediate reaction was to take the students with her so they could experience the call and perhaps undertake CPR. She grabbed the [automated external defibrillator] and they left immediately."

She and her students arrived at the home before other paramedics, according to the IPC's report.

The instructor and a studentmoved the patient from the bed to the floor, but it was then determined resuscitationwasn't possible. Two other paramedics arrived shortly after and pronounced the patient dead at the scene.

According to the report, the instructor told one of the paramedics"she was teaching a first aid/CPR class when she got the call and thought there was no better opportunity for her three students than to attend the call and learn."

The professional conduct committee at SCoP then received a complaint about the incident and an investigation ensued.

Enough evidence to suggestprofessional misconduct

The committeefound there was sufficient evidence to believe professional misconduct occurred, and the IPCconcluded there was a privacy breach.

SHAhas responded to the privacy breach appropriately, according to the investigation report, but IPC isrecommending SHA requires volunteers to take the same mandatory privacy course as employees take.

The IPC is also recommending SHA contact the students involved to ensure they don't disclose any personal health information they may have came across during the incident.