Feeds

Lib Dems call for new NHS data security rules

Lamb demands raised standards

Choosing a cloud hosting partner with confidence

The Liberal Democrats have called on the government to accept a set of priorities to stop the loss of confidential patient data from the health service.

The party's shadow health secretary Norman Lamb has set out the priorities following the revelation, prompted by freedom of information (FoI) requests by the Lib Dems, of more than 150 data losses by NHS organisations.

In a letter to the health secretary, Lamb called for five measures:

  • The Department of Health should publish minimum standards for the protection of data on mobile devices and ensure that all NHS staff are aware of their particular responsibilities.
  • Patient records should not be stored on mobile devices and strict rules must apply to control the copying of data. Any exceptions must be authorised after a risk assessment.
  • All mobile data devices should be protected through appropriate security controls, including the use of authentication, encryption, and other technical separation controls as well as registration and allocation of devices to an 'owner'.
  • Lapses in standards of care should be regarded as potential serious misconduct.
  • The government should formally abandon its plans for a national patient database.

The incidents revealed by the FoI requests include the theft of an entire GP practice system, confidential patient information being posted to the wrong people and a patient record loss so serious that 25 patients were visited by the police and NHS management.

"These reports show utterly shocking lapses in security," said Lamb. "The degree of negligence in some cases is breathtaking given the absolute sensitivity of personal patient data.

"We already know from the information commissioner that the NHS is among the worst offenders for data loss, reporting as many incidents as the entire private sector."

"There must be a fundamental re-examination of how the NHS deals with personal data. The NHS should regard lapses of standards of care as potential serious misconduct."

In a statement to GC News, a Department for Health spokesperson said: "The NHS locally has legal responsibility to comply with data protection rules. They are expected to take data loss extremely seriously, be open about incidents and about the action taken as a result."

David Nicholson, chief executive of the NHS, has written to all senior health managers reminding them of their responsibilities about data security.

This article was originally published at Kablenet.

Kablenet's GC weekly is a free email newsletter covering the latest news and analysis of public sector technology. To register click here.

Secure remote control for conventional and virtual desktops

More from The Register

next story
Bono apologises for iTunes album dump
Megalomania, generosity and FEAR of irrelevance drove group to Apple deal
Facebook, Apple: LADIES! Why not FREEZE your EGGS? It's on the company!
No biological clockwatching when you work in Silicon Valley
Doctor Who's Flatline: Cool monsters, yes, but utterly limp subplots
We know what the Doctor does, stop going on about it already
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
'Cowardly, venomous trolls' threatened with TWO-YEAR sentences for menacing posts
UK government: 'Taking a stand against a baying cyber-mob'
Arab States make play for greater government control of the internet
Nerds told to get lost in last-minute power grab bid at UN meeting
Zippy one-liners, broken promises: Doctor Who on the Orient Express
Series finally hits stride, but Clara's U-turn is baffling
Don't bother telling people if you lose their data, say Euro bods
You read that right – with the proviso that it's encrypted
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.