"It is very concerning that health care providers would simply walk away from their offices leaving records behind, in one case in the thousands," privacy commissioner Diane McLeod said in her report