Unknown person entered hospital ward and left with patients’ data, says watchdog
The incident happened at an NHS Fife hospital in February, the Information Commissioner’s Office said.
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.An unauthorised person entered a hospital ward, helped staff with a patient and then made off with personal information from 14 patients, a watchdog has found.
Police have been unable to identify the person or recover the lost paperwork as their progress has been hindered by the CCTV having being accidentally switched off by a staff member, the Information Commissioner’s Office (ICO) said.
The data protection watchdog has reprimanded NHS Fife after the incident at one of its hospitals in February.
The ICO said the unauthorised person gained access to the ward and then, “due to a lack of identification checks and formal processes”, they “assisted with administering care to one patient” and were handed a document containing the personal information of 14 people.
The data was taken off site by the person and has not been recovered
The ICO said: “The data was taken off site by the person and has not been recovered.
“While the hospital had CCTV installed, the wall socket with the CCTV had been accidentally turned off by a member of staff prior to the incident.
“The police have not been able to identify the person or recover the lost data, hindered by the lack of CCTV footage.”
The watchdog’s investigation found NHS Fife failed to have appropriate security measures for personal information, as well as low staff training rates.
Following the incident, NHS Fife introduced new measures including a sign in and out system for documents containing patient data, and updated identification processes.
Natasha Longson, ICO head of investigations, said: “Patient data is highly sensitive information and must be handled with the appropriate security.
“When accessing healthcare and other vital services, people need to trust that their data is secure and only available to authorised individuals.
“Every healthcare organisation should look at this case as a lesson learned and consider their own policies when it comes to security checks and authorised access.
“We are pleased to see NHS Fife has introduced new measures to prevent similar incidents from occurring in the future.”
NHS Fife and Police Scotland have been contacted for comment.