The Ontario Securities Commission says that between Jan. 1, 2010 and March 31, 2014 Shaida Bandali of Pickering engaged in trading in securities without being registered to do so.
It's alleged she breached the confidentiality policies of her employer by accessing, copying or distributing personal data of maternity patients to one or more Registered Education Savings Plan representatives.
The financial regulator also alleges Bandali created investor lists using unauthorized access to such information and sold them to RESP agents for cash.
The OSC confirmed Monday the alleged breaches occurred at the Rouge Valley Health System Centenary Hospital in Toronto.
Bandali is scheduled to appear in court Dec. 12.