Feeds

NHS Direct wrongly emailed patients' data

But only to itself, so that's OK

Choosing a cloud hosting partner with confidence

An email sent by the NHS advice service mistakenly disclosed personal information about patients, although it did not leave the health service.

The organisation's annual report for 2008-09 reveals that the information, including the names, addresses, NHS numbers, dates of birth and clinical data of about 100 patients, was disclosed without authorisation in October last year.

In a statement to GC News, NHS Direct said that this happened when a spreadsheet was emailed to three people in error. The recipients were two project managers working in separate parts of the NHS, as well as an NHS Direct staff member.

"The staff involved acted immediately and the incident was realised and contained within 12 hours and the data deleted," said a spokesperson for NHS Direct. "None of the information went into the public domain and the incident was reported to the information commissioner."

She added: "NHS Direct takes data protection very seriously and we regularly review our processes and train our staff in order to ensure that we fulfil our responsibilities in this area."

The annual report also says that during 2008-09 NHS Direct answered about 5m calls. The agency says that more than 50% of these calls were handled entirely by NHS Direct, relieving pressure elsewhere on the health service. It has developed decision support software and provided further training for staff with the aim of improving this further during the coming year.

This article was originally published at Kable.

Kable's GC weekly is a free email newsletter covering the latest news and analysis of public sector technology. To register click here.

Internet Security Threat Report 2014

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Internet Security Threat Report 2014
An overview and analysis of the year in global threat activity: identify, analyze, and provide commentary on emerging trends in the dynamic threat landscape.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.