Feeds

NHS Direct wrongly emailed patients' data

But only to itself, so that's OK

Internet Security Threat Report 2014

An email sent by the NHS advice service mistakenly disclosed personal information about patients, although it did not leave the health service.

The organisation's annual report for 2008-09 reveals that the information, including the names, addresses, NHS numbers, dates of birth and clinical data of about 100 patients, was disclosed without authorisation in October last year.

In a statement to GC News, NHS Direct said that this happened when a spreadsheet was emailed to three people in error. The recipients were two project managers working in separate parts of the NHS, as well as an NHS Direct staff member.

"The staff involved acted immediately and the incident was realised and contained within 12 hours and the data deleted," said a spokesperson for NHS Direct. "None of the information went into the public domain and the incident was reported to the information commissioner."

She added: "NHS Direct takes data protection very seriously and we regularly review our processes and train our staff in order to ensure that we fulfil our responsibilities in this area."

The annual report also says that during 2008-09 NHS Direct answered about 5m calls. The agency says that more than 50% of these calls were handled entirely by NHS Direct, relieving pressure elsewhere on the health service. It has developed decision support software and provided further training for staff with the aim of improving this further during the coming year.

This article was originally published at Kable.

Kable's GC weekly is a free email newsletter covering the latest news and analysis of public sector technology. To register click here.

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
I'll be back (and forward): Hollywood's time travel tribulations
Quick, call the Time Cops to sort out this paradox!
Musicians sue UK.gov over 'zero pay' copyright fix
Everyone else in Europe compensates us - why can't you?
Megaupload overlord Kim Dotcom: The US HAS RADICALISED ME!
Now my lawyers have bailed 'cos I'm 'OFFICIALLY' BROKE
MI6 oversight report on Lee Rigby murder: US web giants offer 'safe haven for TERRORISM'
PM urged to 'prioritise issue' after Facebook hindsight find
BT said to have pulled patent-infringing boxes from DSL network
Take your license demand and stick it in your ASSIA
Right to be forgotten should apply to Google.com too: EU
And hey - no need to tell the website you've de-listed. That'll make it easier ...
prev story

Whitepapers

Seattle children’s accelerates Citrix login times by 500% with cross-tier insight
Seattle Children’s is a leading research hospital with a large and growing Citrix XenDesktop deployment. See how they used ExtraHop to accelerate launch times.
5 critical considerations for enterprise cloud backup
Key considerations when evaluating cloud backup solutions to ensure adequate protection security and availability of enterprise data.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.