Image Credit: Ahmadrizal7373 / Dreamstime.com
Sound Off

SOUND OFF: How urgent is digital healthcare security in Kamloops?

Apr 29, 2025 | 3:52 PM

COUNCILLOR KELLY HALL OF KAMLOOPS is proposing a unique initiative that could assist in securing family doctors for thousands of residents. He envisions the City of Kamloops developing its own municipal medical clinic. The motion was introduced during the council’s last meeting and if approved, the clinic could benefit 40,000 people in Kamloops who don’t have access to a doctor. The idea is inspired by the medical clinic in the city of Colwood, a municipality west of Victoria which is the first of its kind in the country. Opening a medical clinic in Kamloops requires a strong focus on digital healthcare security from the start. This means integrating robust security measures to uphold ethical operations, legal compliance and patient trust. Digital healthcare security is not a separate task but an integral part of the entire process of opening a medical clinic in the city of Kamloops.

Why healthcare security matters

Recently, the Minister of Health acknowledged a data breach that targeted thousands of healthcare workers in BC. In 2024, an RCMP investigation indicated a possible privacy breach for thousands of employees who worked or currently work at the health authority. Interior Health officials said police contacted them last January 2024 regarding a document that contained data of about 20,000 people providing social insurance numbers and home addresses. Although there was no patient information in the document, the info covered people who worked at Interior Health from 2003 to 2009. It appeared some employees had their information used for fraudulent loans and other activities following the breach, according to a new investigative report by The Fifth Estate. This demonstrates that digital healthcare security is an urgent concern, given the massive cyber threats faced by healthcare organizations. Cybercriminals are getting smarter disguising daily information technology (IT) operations cleverly making it hard to detect threats.

Phishing, artificial intelligence-powered social engineering and e-mail address spoofing are some of the tricks employed by cyber crooks. Hence, it is critical to beef up healthcare security through awareness training and other strategies. According to the HIPAA Journal, healthcare data breach stats indicate an upward trend in the past 14 years. The journal also revealed that 2021 saw more data breaches than any other year. Therefore, healthcare security is quite urgent and needs to be solid to safeguard patient as well as healthcare worker data.

Digital healthcare security areas of concern

The Personal Information Protection Act (PIPA) and the Freedom of Information and Protection of Privacy Act (FOIPPA) serve as the laws mandating the implementation of reasonable security safeguards to protect patients in BC. Before launching a medical clinic, a privacy impact assessment (PIA) is critical to identify potential privacy risks associated with the digital systems and workflows of the medical clinic. Results of the assessment will allow management and staff including doctors and municipal employees to build security measures effectively. Preparing for potential data breaches is also a vital activity as well as notification protocols built into the digital system of the clinic as required by law.

Another vital component is the electronic health records (EHR) system selection and implementation. When choosing a system for the clinic, the municipal government must select vendors that offer built-in security features like encryption, access controls, audit logs and regular security updates. In addition, data backup and recovery are essential to ensure business continuity in case of cyber attacks or simple system failures. The network security must be fortress-like, complete with firewalls, intrusion detection or prevention systems, and secure Wi-Fi access. Furthermore, the municipal government must plan for regular security audits of the network infrastructure to identify and address vulnerabilities. Above all, it is essential to conduct comprehensive training for all staff members on privacy policies, data security procedures, password best practices, phishing awareness and incident reporting.

The proposal to open a medical clinic in Kamloops will enable underserved patients in the area to access important healthcare services. However, it should also include strong digital security to ensure that both personnel and patients are protected from data breaches, avoid disruption of services and keep the overall integrity of the healthcare system intact. Neglecting digital security can impact individuals, healthcare organizations and the broader community.

——

Editor’s Note: This opinion piece reflects the views of its author, and does not necessarily represent the views of CFJC Today or Pattison Media.