FAQ
Log In
Thursday 8th December 2016
News
 › 
 › 

1.6m patient records lost

20th September 2011

The Information Commissioner's Office has criticised the Eastern and Coastal Kent Primary Care Trust for losing a patient records CD.

laptopstethoscope1

The CD, which was not encrypted, held 1.6 million patient records and was accidentally sent to a landfill site inside a filing cabinet.

The missing CD held information containing patients' addresses, birthdays, NHS numbers and GP codes.

A data controller tried to get the CD back once they realised their mistake but it had already been put to landfill. 

It was misplaced in the course of an office move and the ICO reported that the trust had "strengthened" its data security since the loss.

An ICO spokesperson said: "While there is no evidence to suggest that any of the data was accessed, this case highlights that clear policies and procedures should be put in place to support staff when handling personal information as part of an office move."

However, the ICO said it had not served an enforcement notice on the trust on the understanding that it reviewed its security policies. 

Eastern and Coastal Kent Primary Care Trust's chief executive, Ann Sutton, said they had investigated the mistake themselves and were in the process of implementing some changes.

"We have already strengthened our information governance policies, procedures and training on the basis of our internal investigation of the incident."

"The Information Commissioner’s recommendations to improve them further will be implemented fully." 

 

Share this page

Comments

There are no comments for this article, be the first to comment!


Post your comment

Only registered users can comment. Fill in your e-mail address for quick registration.

Your email address:

Your comment will be checked by a Healthcare Today moderator before it is published on the site.

M3 - For secure managed hosting over N3 or internet
© Mayden Foundation 2016