FROM THE FOUNDATION

Patient Health Data, Understood

Most patient health records today are hard for consumers to understand. CHCF asked high-end designers what a "human-centered" approach might look like.

The Health Datapalooza

Register now for the June 5-6 HDI Forum III in Washington, DC, on health innovation that will include renowned speakers, breakout sessions, and an apps expo replete with demos, developers, and designers.

Privacy and Security

Tuesday, November 01, 2011

Report: U.K.'s NHS Faces Nearly Five Breaches of Patient Data Per Week

The United Kingdom's National Health Service experiences a patient data breach about five times per week, according to figures released by privacy advocacy group Big Brother Watch, UK Press Association/Google News reports (UK Press Association/Google News, 10/28).

For the report, Big Brother Watch used data obtained through public information requests sent to 428 NHS health care providers in England, Northern Ireland, Scotland and Wales.

Details of Breaches

The group found that between July 2008 and July 2011, 806 separate patient data breaches occurred at 152 NHS facilities (Laja, London Guardian, 10/27). Almost half of the facilities reported that there had been at least one data breach during the past year (Rainey, London Telegraph, 10/28).

The breaches included:

  • 129 instances of NHS employees searching for data about colleagues and family members;
  • 57 cases involving unsecured confidential patient information being lost or stolen; and
  • 23 incidents involving patient information being posted on social networking websites.

The report also found that during the study period, 102 NHS staff members were fired for violating data privacy rules (London Guardian, 10/27).

Comments on Findings

Nick Pickles, director of Big Brother Watch, said the research shows that NHS is not effectively ensuring the confidentiality and security of patient information.

U.K. Health Minister Simon Burns said, "We have issued clear standards and guidance to the NHS about what needs to be done to keep patient records secure and confidential. Individual NHS organizations are responsible for ensuring their staff understand and follow that guidance" (UK Press Association/Google News, 10/28).



Readers are also invited to send feedback to: ihb@chcf.org
Click to register for iHealthBeat