We have relaunched: What's new at ZDNet Asia?

UK privacy watchdog cracks down on NHS breaches

Summary

The U.K. Information Commissioner's Office is asking the Department of Health to tighten up data protection after a series of breaches.

Events

Microsoft MSDN/Developer Event
25 Mar 2010

One Marina Boulevard, Microsoft Singapore

IT Architect Regional Conference Singapore 2010
20 - 21 Apr 2010

Singapore Management University, Singapore

The Internet Show 2010
21-22 Apr 2010

Suntec Singapore

The U.K. Information Commissioner's Office is putting pressure on the NHS to improve data security at its facilities, following a string of breaches.

In the past six months, the privacy watchdog has taken action against 14 Department of Health organizations that have exposed private data, a spokesperson for the ICO said on Tuesday.

The office has now written to the permanent secretary for the Department of Health, Hugh Taylor, to ask for tighter protection of personal records. It also intends to carry out unannounced visits to hospitals and other organizations to see how data is treated.

"We're going to be doing spot checks," the spokesperson said. "The ICO has also written to the permanent secretary about a number of recent breaches within the NHS."

The ICO was granted powers to perform spot checks in 2007 following a data breach by HMRC. The ICO is expected to be granted extra powers of investigation of public-sector establishments when the Coroners and Justice Bill, currently working its way through parliament, becomes law. The next step in the bill's progress is a committee hearing in the House of Lords in July.

According to ICO figures, there have been 140 data breaches reported by the NHS since November 2007. Of those breaches, 58 are attributed to stolen data or hardware, and 43 to lost data or hardware. In the past three months alone, the NHS has reported 38 data-security breaches, including 14 involving stolen data or hardware. Other causes of breaches include data being lost in transit, non-secure disposal and technical failures.

The Department of Health confirmed on Tuesday that it had received a letter from information commissioner Richard Thomas regarding the data-loss incidents. However, it denied legal responsibility, saying it was a matter for local NHS organizations.

"The NHS locally is legally responsible for complying with data-protection rules," the Department of Health said in a statement. "They need be open about incidents and about the action taken as a result, including action against anyone responsible for breaching our strict data protection rules."

The Department of Health said that NHS IT modernization programs will minimize the risk of data loss. It noted that this year, NHS bodies will be required to publish details of data losses on their Web sites.

"The information commissioner has full authority to prosecute in cases of data breaches," added the Department of Health. "Typically, data losses are investigated locally by the police, and where appropriate, disciplinary action or prosecution can apply."

The information commissioner issued a warning to NHS bodies at the end of April regarding a number of breaches of patient records since 2007. One incident cited was the loss from Cambridge University Hospital of an unencrypted USB stick, which was later recovered by a car-wash attendant. Thomas also mentioned the loss of an encrypted memory stick containing medical details of 6,360 prison patients from HMP Preston--where the password was attached to the device in question.

Thomas also censured North West London Hospitals NHS Trust following the theft of two unencrypted laptops and a desktop during a period when Central Middlesex Hospital's security swipe-card system was disabled for maintenance.

Talkback

Add your opinion

In order to post a comment, you need to be registered. (Sign In or register below)

Post your comment
Transform your business interactions with real-time voice, video and telepresence solutions.
Tech Vendor: Cisco

ZDNet Asia Live

"Lead Cognos BI Developer Insurance in New South Wales , Australian ..." http://bit.ly/ayy19L

52 minutes ago by rhrcognos on topsy

hmmm, Weight Loss BMI Calculator with Charts - Free Software Downloads ... http://bit.ly/dB9ZMX

4 hours 5 minutes ago by myweightcontrol on topsy

whatever little understanding I have we 'll only progress toward end of the world if we use HPCs to lenthen life of human being. Huma...

10 hours 4 minutes ago by abhi32002@gmail.com on High computing promises elixir of life

Thanks for the knowledgeable article on SDDs. Allas...when all this reasearch will happen in Indian Universities. Hope the new bill on Fo...

10 hours 16 minutes ago by abhi32002@gmail.com on APAC HPC users eye solid-state drives

It was a good article. This brings a good opportunity for Indian IT firms to come up with new solutions in this field. HPC can become a b...

10 hours 35 minutes ago by abhi32002@gmail.com on High computing most-wanted job in Asia

COL KR DHARMADHIKARY(RETD) its very late to reply the link, but if it is still alive and looking for opportunity, i would like to know th...

14 hours 32 minutes ago by deb021280 on Education takes off in rural India, helped by PCs

It was just a matter of time until google was marginalised anyway. I'm afraid this will be forgotten in China very quickly. Still, it...

16 hours 37 minutes ago by robinsmith on Report: Google to leave China on April 10

High performance computing (HPC) most-wanted job in Asia http://bit.ly/9vFC3i (via @zdnetasia) #singapore

He doesn't care if her shoes are of glass, All he wants to see is a huge rack and nice a*s. Sleeping beauty's not awoken by true ...

17 hours 6 minutes ago by warlowdavies on One pair of 3D glasses to rule them all

RT @zdnetasia: EMC COO, Pat Gelsinger, on bridging gaps in the organization and its cloud ambitions in Asia. (cont) http://tl.gd/i5jjd

EMC COO, Pat Gelsinger, on bridging gaps in the organization and its cloud ambitions in Asia. http://bit.ly/9etOZW

#Cloud #News EMC ramps up cloud efforts through tighter alliances - Zd Net Asia.com: Six months into his job a... http://bit.ly/bQzvqF #TCN

17 hours 48 minutes ago by thetechgang on topsy

Asian SMBs need to pay more attention to disaster recovery planning http://bit.ly/bDet08 via @zdnetasia

Asian SMBs need to pay more attention to disaster recovery planning http://bit.ly/bDet08

RT @LotusKnows ZDNet Asia features IBM collaboration roadmap story from LCTY Singapore - http://bit.ly/9CuSbZ #lotusknows

19 hours 15 minutes ago by lyvconnections on topsy

[TECH] URL Shorteners slow Web redirection. - http://bit.ly/bySnWK @zdnetasia

URL shorteners are great but they can slow web redirection & you pray it would never go down http://bit.ly/bySnWK via @zdnetasia

Temasek Holdings eyeing tech stocks, indicating optimistic outlook on IT sector. http://bit.ly/aM7VwU

URL shorteners slow Web redirection. http://bit.ly/bySnWK

Chinese agencies cry foul over Google. http://bit.ly/by6rwV

Philippine antipiracy drive focuses on enterprises. http://bit.ly/aWryDC

Gartner: China to become world's fastest-growing enterprise software market. http://bit.ly/bqJTtb

all of sg's isps have been practising compulsory invisible proxy for all home subscribers at their backend since many years back alre...

1 day 16 minutes ago by melvinchia on Web filters mean bad news for business

it is not to good for china.
Proactol

2 days 1 minute ago by nathonastle on Chinese ad partners beg Google for information

RT @zdnetasia: HP touts new products and management and productivity tools to address business computing pain points. http://bit.ly/dudgA6

For those with a computer science background, or interested in the high performance computing scene: http://bit.ly/9vFC3i

HP touts new products and management and productivity tools to address business computing pain points. http://bit.ly/dudgA6

Very good explanation of JMX

2 days 6 minutes ago by Babith B on Managing applications with JMX

The reaction to a report issued Tuesday by Flurry Analytics managed to completely overlook some interesting news--the Android-based Motorola Droid outsold the original iPhone over the same period of time following their respective launches--to focus instead on the sales numbers for the Nexus One.

3 days 10 minutes ago by lonemavericks on diggs

Another ZTE story....

3 days 11 minutes ago by Moderate Your Greed on Philippines opens bid for final 3G license

We at www.fifosys.com have also seen a growth in IT outsourcing and anticipate it as a growing field.

3 days 45 minutes ago by sarah Jane on Companies' outsourcing spend to increase

I agree with you. The iSiVaL is super portable and TVs can't expand their image size. I recorded a video that might bring some ideas to...

3 days 15 minutes ago by Jesse B Andersen on Buying a projector? Try an LED TV instead

hermm... he deserved it.. he shud not talk abt sensitive things like tat, well, he shud think twice before saying all those things, event...

3 days 53 minutes ago by ... on Facebook user charged in Malaysia

Password manager tools are potential security threat. Criminals who hack into the computer can use the password manager to log onto any s...

3 days 53 minutes ago by ohanae on What defaults should random password generators use?

I've found the cross platform utility unetbootin to be rather handy for this kind of thing as well.

3 days 28 minutes ago by Jim on Use Live USB Creator to install Fedora 12 from a USB stick