NHS 'loses' thousands of medical records

26 May 2009

The NHS has lost the personal medical records of thousands of people in a series of security breaches this year, the Department of Health has confirmed.

Between January and April this year, a total of 140 incidents were reported internally including computers holding medical records being stolen and passwords attached to encrypted discs containing sensitive information, The Independent newspaper reported.

The Information Commissioner was forced to take action over data breaches at 14 NHS bodies in the last six months.

Commissioner Richard Thomas told the newspaper that an urgent review of data security within the health service had been ordered by the watchdog. He plans to use a team of inspectors to examine how medical data is being protected across Britain.

According to the newspaper, in one case a GP downloaded the medical records of 10,000 patients on to an unsecured laptop, which was later stolen.

While in another alleged breach, a memory stick holding personal medical details of patients at Preston prison was lost and although the sensitive information was encrypted, the password was attached to the device.

Assistant information commissioner, Mick Gorrill said there was a "complete disconnect" between procedures laid down by managers and practice "on the ground".