Adding health-care numbers to Alberta licences increases fraud risk: privacy watchdog

Alberta's privacy watchdog is raising concerns about the government's plan to add health-care numbers to driver's licences and other forms of identification.

Information and privacy commissioner Diane McLeod said it would increase the risk of fraud as the numbers could be obtained outside of health-care settings.

"Personal health numbers of Canadians are a sought-after commodity on the dark web due to our publicly funded health-care system," McLeod wrote in a letter to government, published Monday.

"Use of someone's [personal health number] to access medical care could result in the wrong health information appearing in their record, which could cause them harm."

The government announced the move last month, saying it would make it more convenient for Albertans to access health care as they wouldn't have to carry multiple cards to prove their identity. It also plans to add mandatory citizenship markers to licences and other forms of ID.

McLeod said she had warned the government to abandon its plan because of the increased risk of fraud, and because the Alberta government body responsible for driver's licences, the Registrar of Motor Vehicles, isn't subject to privacy laws.

"As such, they will hold highly sensitive health information of all Albertans, with no corresponding duty to protect this information and no consequences for breaches," McLeod wrote.

"There is also no oversight by my office."

Primary Health Services Minister Adriana LaGrange's office, in a statement Tuesday, said protecting personal information and personal health numbers is a priority, but the government was going to move ahead with its plan.

"[The legislation] clarifies that anyone who collects a driver's licence or ID who is not authorized to use a personal health number cannot use it for any purpose," her office said.

It also said that the government is developing further regulations regarding the motor vehicle registrar and is to discuss those changes with McLeod.

"Ministries such as Service Alberta, Red Tape Reduction, and Technology and Innovation will not be authorized to use this information for other purposes, and all departments are required to maintain Albertans' personal and health information in accordance with provincial privacy legislation," LaGrange's office statement said.

McLeod said the legislation, tabled last week, raises other privacy concerns as well, though she is commending the government for accepting a number of recommendations she made before the bill was brought forward.

"That said, several of my recommendations have not been addressed in the amendments and some recommendations have been only partially addressed," she wrote.