This complaint is related to a government health lab that was the subject of a previous complaint. The original complainant was concerned about the disposal of lab samples containing personal data. In response to that complaint the lab revised its internal policies and adopted strict procedures for the staff to follow when disposing of samples. The complainant in this matter alleged that a contractor working in the lab disposed of samples without following the lab’s procedures and may have improperly disclosed personal data.
Representatives of the lab said the administration was not made aware of this incident until a week after it occurred and thus they were unable to immediately address the issue. Lab representatives said a review was conducted after the incident, but they found nothing to indicate that personal data had been improperly disclosed. In response to this complaint the lab made several changes to their policy regarding visitors and contractors. The updated policy requires visitors to be escorted by staff or remain in direct view of staff at all times. Contractors may have unsupervised access to the lab, but they must be advised about and follow all of the lab’s policies and procedures, including those related to the destruction of samples containing personal data. The policy also indicates that the staff must ensure that visitors and contractors comply with these requirements and immediately report any violations to the administration.