_report... · web viewa considerable amount of notes left in a car both in the boot and on show....

Publication date: 16th January 2015.

Report of Health and Social Care sector Level 2 Information Governance Serious Incidents Requiring Investigation recorded and now closed during

01 s October to 31 st. December 2014

Purpose

This is the fourth published report of closed level 21 Information Governance Serious Incidents Requiring Investigation (IG SIRIs) recorded on the IG Toolkit Incident Reporting Tool. This type of report will be published on a quarterly basis as specified in the IG SIRI Publication Statement2.

The report below consists of 64 incidents reported to the Information Commissioner’s Office (ICO), Department of Health (DH) and NHS England (NHSE) by Health or Adult Social Care organisations or suppliers (as advised within the IG SIRI Guidance issued7th November 2014). It covers IG SIRI level 2 incidents closed during the period of 1st. October to 31st.th. December 2014, following investigation by the local organisation(s) concerned. It contains the organisation name, date the incident occurred, scale (e.g. the number of data subjects affected presented as a range), a description of the incident and data involved. All information displayed below is as reported by the organisation(s) concerned.

Please note:

A ‘Closed’ incident means that the incident has been investigated by the local organisation and no further action is required unless the ICO make a request.

Closed incidents may still be under review by the ICO and any actions taken will be published on the ICO website.

This report does not include level 2 incidents which are still marked as open and therefore still under investigation by the local organisation.

Any near misses, Level 0 and 1 incidents voluntarily reported by organisations are also excluded as these incidents are not currently being monitored by the Health and Social Care Information (HSCIC) Centre but are useful for gathering intelligence, analysing trends and learning from previous occurrences.

Details of such incidents are held by the local organisations.

Next reports

The next closed level 2 IG SIRI report will be published by the end of April 2015 covering the period January to March 2015.

Closed Level 2 IG SIRIs from 1 st . October to 31 st . December 2014 1 Level 2 IG SIRIs are sufficiently high profile cases or deemed a breach of the Data Protection Act or Common Law Duty of Confidentiality, and hence reportable to the Department of Health and Information Commissioner’s Office. Organisations have used the IG SIRI assessment of severity facility to determine this level and report the incident. Further information on this can be found in the ‘Checklist Guidance for Reporting, Managing and Investigating IG SIRIs’.2 https://www.igt.hscic.gov.uk/resources/IGIncidentsPublicationStatement.pdf.

1

http://www.ico.org.uk/what_we_cover/taking_action/dp_pecr

https://www.igt.hscic.gov.uk/KnowledgeBaseNew/HSCIC%20IG%20SIRI%20%20Checklist%20Guidance%20V2%200%201st%20June%202013.pdf

https://www.igt.hscic.gov.uk/KnowledgeBaseNew/HSCIC%20IG%20SIRI%20%20Checklist%20Guidance%20V2%200%201st%20June%202013.pdf

https://www.igt.hscic.gov.uk/resources/IGIncidentsPublicationStatement.pdf


Organisation Name Date of Closure

Scale of Incident

Details of Incident Data

ROYAL BERKSHIRE NHS FOUNDATION TRUST

23-Dec-14

Information about less than 11 individuals

Nine patient letters were incorrectly sent to a patient’s address rather than the GP surgery.Part of the GP address was included on the envelope but the remaining address was a patient's address.

Nine post clinic letters patients address.

NHS Newbury and District CCG

18-Dec-14

Information about 1,001-5,000 individuals

A Committee paper was found to contain an embedded document which in turn contained approx. 2500 NHS numbers and associated Dates of Birth. The Committee papers had been sent to all Fiance & QIPP Committee members via NHS.Net email accounts (encrypted), except for 2 lay members who received the papers into a non NHS.net account

.

NHS NumberDate of BirthSurgery Name

CUMBRIA PARTNERSHIP NHS FOUNDATION TRUST

15-Dec-14


A review of the GP Practice codes stored by PCIS showed that it used national organisational code service (OCS) codes (e.g. A82021). As the target system accepts national codes, the practice codes in PCIS were used to migrate the data. No mapping or translation was performed on the GP Practice Codes they were migrated "as is" from the PCIS system. This showed that there was no discrepancy between PCIS code and the CCH2000 code, however, highlighted that there were a significant number of children where the GP had not been updated within the system due to lack of notification. Issue particularly relates to pre-school

Investigation hasfound that there were 5822 children where the GP was different on CCH2000 than it was on the national spine and potentially 3200 children whose vaccination and immunisation schedule were not correctly configured on the CCH2000 system.

NORTHERN DEVON HEALTHCARE NHS TRUST

22-Dec-14

Information about 11-50 individuals

At a meeting, copies of theatre lists with patient identifiable data were circulated to both hospital and Sodhexo staff.It is not currently known how this information became available at the meeting, but it appears that emailed information may have been forwarded, and subsequently hard copies printed.

Theatre lists with patient identifiable data were circulated to both hospital and Sodhexo staff.

2


The information was originally emailed by a Service Manager to a Divisional Manager and Director of Ops, and subsequently emailed to another Divisional Manager.

St Andrew's Healthcare (Original code of NTY85)

23-Dec-14


Patient 1 was being transferred to Ward 12, Pilgrim Hospital, and Lincolnshire on the 23rd September. On the 25/09/14 Staff A (health records co-ordinator) made contact with the ward manager of Sherwood to advise they had received a phone call from ward 12 to state they had received 2 weeks notes for patient 2 not patient 1

2 weeks’ worth of healthcare record, which includes sensitive personal data such as diagnosis and physical healthcare information.

As the information went to another healthcare professional (motivated defender) and was destroyed upon discovery it is unlikely that there will be any significant impact to the subject's privacy.

Birmingham Community Healthcare NHS Trust

15-Oct-14


On the 24th of Sept 2014 a patient attended local clinic for treatment. After patient/clinician discussion treatment was declined due to current medical status of patient.Father of the patient then contacted the service after the patient returned home to complain about the treatment being cancelled.Clinician disclosed patient’s current medical status in error during the conversation as part of the explanation for declining treatment.

Patients current medical status


07-Oct-14

Information about 501-1,000 individuals

The Haverigg Clinical Governance meeting highlighted a significant risk raised by the Head of Healthcare at the prison in relation to maintenance of clinical records. It had been identified that a number of clinical letters dating back to 2010 were waiting to be scanned and uploaded onto System One (Electronic Patient Record information asset). . This highlighted a potential breach in principle 4 (information being up to date and accurate) and potentially principle 5 (being kept for longer than is necessary). The paper records have been secure at all times and therefore

Approximately 1253 items have been scanned into the record as soon as this risk came to light. There remains at 29 Sept 2014, 793 records left to be scanned into the information asset. Continued focus remains to ensure that this task is completed immediately.

3


there is no breach in terms of principle 7 (security).

North Somerset Community Partnership CIC (NLT)

22-Dec-14


On a monthly basis the MSK service emails the Referral Support Service (CCG) an Excel spreadsheet containing a list of non-identifiable dataset items. The MSK administrator removed the patient names column from the spreadsheet for the month of August and forgot to copy August data into a separate spreadsheet therefore inadvertently when sending the spreadsheet had attached previous month’s data which contained patient names. The email was sent securely using NHS.net.

Patient names Date arrived at MSKGP PracticeReferring GPProblem ReferredTriage decision Prior approval policyPrior approval agreedPrior approval policy number Back to GPAppointment date, time and clinician or commentsDate left MSK/Date sent to RSS


06-Nov-14


Member of NSCP used internal 'mail service' to send personal confidential data without adequate security measures such as inserting the folder into a container or envelope to send the information from one base to another. The contact address was inadequate given the recipient who works at NSCP's Castlewood base is in a large open plan office.

Patient demographic details and clinical information. 'Full copied set of patient notes including photographs of leg wound, full patient assessment and care plans.

BLACKPOOL TEACHING HOSPITALS NHS FOUNDATION TRUST

04-Dec-14


A subject access request was received for information which predates the current on-line departmental archive system. Older information (pre 2003) is held on CD. During a successful retrieval of the information for the SAR it was noted that one CD was not in the CD Box. Despite a full departmental search and investigation it is still unaccounted for. A copy of the data is held.

Scanned copies of sexual health record pre 2003 - The information was archived by the PCT and access is very infrequent.


22-Dec-14


Community nurse left two RiO printed diary sheets in a plastic wallet in a tray in the nursing office of the Care home when visiting a patient on Friday 05 September 2014.

Patient demographic: name, full address, date of birth and NHS number.Limited clinical information consisted of; wound care, insulin, and category 4 pressure area.

NHS England 03-Dec-

Information about

NHS numbers, DoB's, ethnicity, gender, patient names of approx.

NHS numberName

4


14 10,001-100,000 individuals

20,000 patients covering the period April 2013 to date emailed to Greenwich CCG in a spread sheet relating to walk-in centre performance in Greenwich by primary care commissioning team.

Date of birthEthnicity Gender

UNIVERSITY HOSPITAL OF SOUTH MANCHESTER NHS FOUNDATION TRUST

29-Oct-14


A number of telephone calls have been made to the Trust from patients wondering why they have received a letter advising of a change of address for the Disablement Services Centre

Includes the name, address and patient reference numbers for each recipient. However, the main substance of the letter is uncontroversial and the information about the relocation could easily be disclosed by the Trust into the public domain if it is not already public knowledge.

NORTH EAST AMBULANCE SERVICE NHS FOUNDATION TRUST

27-Oct-14


A number of unencrypted emails containing Patient Identifiable Information have been sent from numerous NEAS email accounts to an email address of a company whom reside in Georgia, USA.

Patient namePatient D.O.BPatient postcodeHospital locationLimited clinical information


22-Dec-14


It is unclear at present if the 'bundle' of personal confidential data was intended to be sent via 'internal post' without adequate packaging. Further work is being undertaken to identify the details of this incident. During the interim, the IG assessment has identified the following points as a concern to date:

1) inadequate security measures for e.g. use of sealable envelope clear labelling including recipient name and address, private & confidential.2) Community bases post is collected by an external company (courier) who delivers to an external company (North Somerset Council) who subcontract the post room at Castlewood to Liberata via Agilisys.

Two RiO diary sheets containing patient demographic information with limited clinical information such as wound dressing as purpose for visit., Two sets of progress notes - these contained : three referral forms from SPA - these contained :

BASILDON AND THURROCK UNIVERSITY HOSPITALS NHS FOUNDATION TRUST

11-Nov-14


Handover sheet for Puffin and Wagtail paediatric wards found outside Accident & Emergency ambulance entrance by a member of Trust Staff.

Sheet contains 16 patients (paeds) Ward, Bed, Admission Date, Name, DoB, Gender, NHS & Hospital Number, Problem/Diagnosis,

5


Investigations/Plan, Jobs and Current Status.One patient contains the mother’s home and mobile contact numbers.

Insight Healthcare 17-Dec-14


The data had comprised a questionnaire that had been submitted initially electronically by a potential client to access the local primary care psychological therapy service. This included detailed sensitive information relating to the client's personal history.The information supplied by the client was initially protected by being highlighted for action by staff in a team that did not include the friend. Subsequently a decision made by a member of staff who was conducting a review of assessment within the service, led to a paper copy without name, DOB or address being reviewed by the member of staff who was the client's friend and who nevertheless was able to identify the client from the detail.

Service user information relating to personal history submitted to access a mental health service provided on behalf of the NHS

THE QUEEN ELIZABETH HOSPITAL KING'S LYNN NHS FOUNDATION TRUST

09-Oct-14


A member of staff found a medical hand-over sheet on a path on Elvington Road (approx. 200m from the Trust) containing the names, ages, and summaries of diagnosis, bloods and treatment plans, together with notes handwritten on the sheet, for 11 patients.

Summaries of diagnosis, bloods and treatment plans, together with notes handwritten on the sheet

WALSALL HEALTHCARE NHS TRUST

10-Nov-14


A Community Nurse was visiting a family at home and had her car broken into. A bag was stolen which contained community records relating to 13 babies. The bag was hidden under the front passenger seat of the car. Police were informed, and the parents of the babies are to be informed on the 19.8.14.

Sensitive data

IMPERIAL COLLEGE HEALTHCARE NHS TRUST

29-Oct-14


An alleged Bogus Nurse accessed the Emergency Department (ED) of St Mary’s Hospital Paddington on the Tuesday 12th and Wednesday 13th August 2014 between the times of 10pm and 2:30am, he was wearing theatre scrubs and when challenged claimed he was a “resus agency nurse” he was

It is known that the bogus nurse was able to access a PC that had been left logged in.The account logged into this PC had access to shared drives with files containing Person

6


using a stolen staff ID from another Trust that had been altered to bear the name “XXXXXXXX”

It is known that the bogus nurse was able to access IT systems during the time they were in the department.

Identifiable Information.It is also known that the Bogus Nurse was able to access smartcards potentially giving access to the Trusts PAS

CENTRAL AND NORTH WEST LONDON NHS FOUNDATION TRUST

10-Oct-14


Staff A sent an email intended for Service User A to another email address (of unknown recipient). Staff A had verbal consent to send the email, but had not obtained written consent. The email contained an attachment of a draft of a referral letter for Service User A to a psychotherapy service and therefore contained sensitive information regarding Service User A’s difficulties. Staff A was alerted to this when Service User A contacted her to state that she had not received the email. Staff A checked the sent email address and discovered that it had the wrong domain name.

Draft of a referral letter.

MILTON KEYNES GENERAL HOSPITAL NHS TRUST

24-Nov-14


A considerable amount of notes left in a car both in the boot and on show. These notes related to a substantial amount of patients, numbers yet to be identified.

Pregnancy booking form and antenatal and post natal clinical notes and forms.

UNIVERSITY HOSPITALS OF MORECAMBE BAY NHS TRUST

27-Nov-14


Medical handover sheet with patient labels, details of diagnosis investigations and past medical history found in the staff car park

Medical handover sheet with patient labels, details of diagnosis investigations and past medical history

NORTH TEES AND HARTLEPOOL NHS FOUNDATION TRUST

25-Nov-14


Secretary named on letter was contacted and informed of error. OPD receptionist was asked to dispose of the letter and the mistake would be rectified.

The data contained in the letter was name, address, DOB, brief medical history, Height, weight and BMI.


27-Nov-14


A hand over sheet - Which is used on wards to update colleagues on patients who are currently on the ward when staff finish their shift and new staff

2 ward hand over sheets

7


come onto the shift. Was located in a public bin in Oswaldtwistle (Blackburn). Medical Records legal department were informed of the handover sheet being located in a public bin by a member of the medical records department at Blackburn Hospital.


04-Dec-14


Member of staff has lost /misplaced important documents relating to a family. member of staff unable to locate paperwork despite searches being made.

2 adults2 children DOB's , names and addressSafeguarding issues documented

ROYAL BERKSHIRE NHS FOUNDATION TRUST

23-Dec-14


A member of public alerted the Trust on 23 July that a patient clinic letter was available via an internet search engine.

On review 63 patient letters were available on files on a FTP site. We contacted our contracted transcribing company, dScribe, to alert them and within 30 minutes the files containing these letters were blocked and therefore no longer accessible. A subsequent request by dScribe has been made to Google to take down the relevant pages.

Total of 63 patient letters available on a FTP. Varying levels of data breach as some letters contained a name only with no other identifiers. Eight patient letters with full identifiers, including name, date of birth and address. Letters were post clinic letters from consultant to GPs. Company has been asked to provide us with full details as part their investigation report back to the Trust.

VOCARE 03-Oct-14


Email containing patient sensitive and identifiable information sent from NHS.uk email box to NHS.net box. both emails in N3 connection

Email containing patient sensitive and identifiable information sent from NHS.uk email box to incorrect NHS.net box

970 names addresses ethnicity, ages, presumptive diagnoses of patients

MID STAFFORDSHIRE NHS FOUNDATION TRUST

20-Oct-14


Breach of patient confidentiality involving part of one patient's medical records being provided to another patient.

NHS patient data.

Lincolnshire Community Health Services NHS Trust

30-Dec-14


Burglary 16.07.14. Offenders took encrypted laptop and laptop bag, Trust Mobile Phone, diary and within laptop bag contained a waiting list of approx. 20

Laptop is encrypted so no risk to any data. Waiting List of approx. 20 NHS Diabetic Patients contained

8


Diabetic Patients. Name, Address, DOB and general comments such as 'Insulin' or 'Requires Appointment'.


19-Nov-14


Case notes and dictation tapes from out-patient clinics are transported by the portering service to the secretaries. A number of days had passed before it was noted that the tape was missing. A thorough search of the Out-patient areas was undertaken and all relevant members of staff have been included in the investigations. The tape has not re-surfaced.

The data lost is clinical information dictated about a patient after an Out-patient appointment.

THE NEWCASTLE UPON TYNE HOSPITALS NHS FOUNDATION TRUST

14-Oct-14


A spreadsheet containing patient identifiable data and clinical data for 1997 patients was sent in error to the wrong NHS address. The data was sent securely from nhs.net to nhs.net however to the wrong recipient. The individual receiving the data immediately informed the Trust and deleted all copies of the data.

Demographic and some limited genetic data.

Croydon Health Services NHS Trust

12-Nov-14


The Birth register covering dates from April 2009 to May 2010 cannot be located with the other registers which are stored in PDM office.

Searches conducted include: Full search of PDM office, Labour ward resource room, Obstetric theatre, Store room on Labour ward checked again.Staff groups which may have required the register e.g. Audit dept. Risk Management team , Legal Dept. asked to check if the register was with them

Names and addresses , type of birth and details of the baby , mother and babies condition


27-Nov-14


Patient was discharged with a discharge summary to take home. When the envelope was opened they also found a 4 page handover sheet which contained name, RTX, date of birth, clinical issue, investigations and plan for 35 patients, including themselves, over several wards.

Handover sheet which included name, RTX, date of birth, clinical issue, investigation and plans.

Solihull Metropolitan Borough Council

09-Dec-14


A mental health report was filed with the court and the court shared a copy of the report with the data subjects ex-partner

Personal data relating to a mental health assessment

HEART OF ENGLAND NHS FOUNDATION

07-Oct-14

Information about less than 11

Member of staff accessed records of person known to her

NHS patient data

9


TRUST individualsTHE NEWCASTLE UPON TYNE HOSPITALS NHS FOUNDATION TRUST

09-Oct-14


A large pack of data from an HR record was scanned and sent to Trust solicitors. A letter which formed part of the HR record but was not releasable to solicitors was scanned onto the reverse side of a document which was due to go to the solicitors and then sent with the full pack of documents.

A scanned letter containing medical information which had been sent to the HR department as part of the occupational health report.

BIRMINGHAM CHILDREN'S HOSPITAL NHS FOUNDATION TRUST

30-Oct-14


A clinical handover sheet headed Haematology was found outside the law courts in Birmingham.

Data includes patient name, hospital number, date of birth, list of current problems, results, drugs, plan of care, handover notes.

BRADFORD DISTRICT CARE TRUST

08-Dec-14


Worker sent material, including Occupational Health records, to Health and Care Professions Council. The release had not been authorised by the Trust.

Personnel data


25-Nov-14


A clinic letter to GP relating to an eight year old child was copied to the parents of the child. An error led to the patient's address being recorded as 8 instead of 28.

The letter contained clinical information from the child's attendance and also family history information regarding adoption and birth family

Letter containing Information from clinic attendance plus information relating to adoption and birth family


25-Nov-14


Patient correspondence sent to wrong address due to typing error. Recipient returned letters to named GP practice who in turn returned letters to the Trust.

Correspondence sent to wrong patient address due to a typing error made by a secretary. Patient lives at number 22 and copies of GP letters were sent to number 2. Resident of number 2 opened the letters, realised the error and returned them to the GP practice named in the letters. The GP practice forwarded the letters back to the Trust upon receipt. The Trust received the letters from the GP practice on the 22/5/2014 upon which the incident was immediately reported. Immediate investigation found that the letters contained sensitive information regarding the patient whom is a minor which included

The letters (a referral to the Genetics Service and a letter to the GP informing of test results) contained sensitive information regarding the patient whom is a minor which included results of genetics testing which also made reference to the mother. The letters contained the patients name and date of birth.

10


results of genetics testing which also made reference to the mother.

Derbyshire Healthcare NHS Foundation Trust

20-Oct-14


Community Psychiatric Nurse reported that service user PW informed her that whilst an In Patient at the Hartington Unit she had accessed the Staff Office and Nursing Station and removed paperwork from the notes of a number of other patients. PW has refused to disclose what she took or what she did with it. PW had done this previously during admission but staff had been able to retrieve the paperwork on that occasion.

In Patient records- details unknown as the service user refuses to disclose what she has taken


07-Oct-14


The Trust's ABI Team received a phone call from the estranged wife of the data subject asking for information relating to her husband for Court Proceedings involving their children. This information was released without any lawful and fair processing condition and therefore breach of Data Protection Act 1998 (principle 1).

A letter from the Consultant Psychologist was released including details under the following headings: reason for referral, presenting problems, safeguarding information (i.e. MARAC form details), formulation of the case etc.

HEART OF ENGLAND NHS FOUNDATION TRUST

29-Dec-14


It appears that a member of staff accessed the patient's records without clinical need and may have disclosed information to a third party.

Personal sensitive data


30-Oct-14


The handover sheet was found by another doctor at the Queen Elizabeth Hospital on the morning of Saturday 19 April 2014. On reviewing the document it transpired that the 17 children listed were BCH in-patients. Handover sheet contain patient details such as name, Ward Bed, Unit Number, date of birth, date of arrival, consultant initials, admission details, details of current progress/outcome, Jobs (day/on-call team).

Patient first and surname, Ward Bed location/number, Unit Number, Date of birth, Date of arrival, Consultant initials, Admission details, Details of current progress/WR outcome, Details of jobs(day on-call team)

TEES, ESK AND WEAR VALLEYS NHS FOUNDATION TRUST

02-Oct-14


Staff A carried out break glass auditing, detected Staff B on 26 Mar 2014 had accessed electronic records of Patient X.

Staff A emailed Staff B to elaborate their access as to clarify which team they need to

1 x Personal Details and 4 x Case notes

11


locate for filing. Staff B replied query of Staff A and apologised opened patient's notes by mistake. Staff A carried out further investigation and also clarified with Staff C, line manager of Staff B. Staff A and Staff C both agreed that the access needed to look into and both said to escalate the incident to their line manager respectively.


30-Dec-14


Diary found on the road in a public place and handed into the organisation by a member of the Public.When received into the organisation, there were demographic details, minor PID and loose paperwork containing more detailed PID in the back of the diary.

NHS Patient Data in relation to Children - visits/appointment details.Service User Information in relation to sensitive referral to Social Services (one record).


30-Oct-14


A clinical handover sheet belonging to PICU was found in the Street in Birmingham City Centre. The handover sheet contains details of 29 children as follows, bed number, name unit and unit days, date of birth and age, diagnosis, date of arrival on PICU and source, notes and BCH and PICU consultants. The sheet was found by a member of PICU staff who informed his manager and completed an incident reporting form.

Bed Number, Name PICU Unit and PICU Unit Days, Date of birth and age, Diagnosis, Date of Arrival on PICU and Source, Notes, BCH & PICU Consultants

LANCASHIRE CARE NHS FOUNDATION TRUST

01-Oct-14


Team alerted by a teacher from a local primary school, served by the Children and Family Health Service, to say that a parent had contacted the school. This followed the parent receiving an envelope containing information to support his children with healthy eating; this had been left by the school nurse for him to pick up from the school.

Personal details e.g. names of children, highly sensitive and confidential safeguarding information relating to a child protection plan and serious injury.

BRADFORD DISTRICT CARE TRUST

08-Dec-14


Information about patients with the same name and date of birth entered in each other's records.

Detailed information at risk e.g. clinical/care case notes, social care notes

High risk confidential

12


information

MERSEY CARE NHS TRUST

11-Nov-14


An envelope was collected from the Ashworth Hospital, Parkbourn, Maghull, L31 1HW High Secure Mailroom by Mersey Care Trust Transport Driver on 18.2.14. The envelope was to be transported to the V7 Building, Kings Business Park, Prescot, L34 1PJ by the Trust local transport service however, it was put into the Royal Mail sack. The envelope was addressed "Patients Cash V7" and due to the lack of a full address or postcode it was opened in the Royal Mail sorting office in Warrington to identify the sender the contents were secured re-packaged and returned to the V7 Building, Kings Business Park, Prescot on 19.2.14 am. The trust acknowledges that the Royal Mail is a privatised company & that patient’s confidentiality was compromised.

The information that was potentially at risk was patients personal information which related to their names, wards, Ashworth Hospital, and financial instructions for the Cash Office to process and action on their behalf

KENT COMMUNITY HEALTH NHS TRUST

20-Oct-14


On 18 February a clinical letter to a patient’s GP was faxed in error to a local family-run haulage company. The clinical letter contained the patient’s contact details, NHS number, date of birth, information about diagnosis, medications, a summary of the issues, and the management plan in relation to their medical condition.

The clinical letter contained the patient’s contact details, NHS number, date of birth, information about diagnosis, medications, a summary of the issues, and the management plan in relation to their medical condition

PENNINE CARE NHS FOUNDATION TRUST

25-Nov-14


Records were required for court on 21/02/2014. All Mental Health medical volumes were located. However clinical information covering a span of 3 years could not be located for community mental health. The service that has provided care for this patient during this time period had been disbanded. The risk is that it may be detrimental to the client who may suffer significant distress.

NHS patient data

13



30-Dec-14


Instead of decanting the specimens into the approved clear Specimen Bags as planned, an Orange Waste Bag was used and passed to Reception Staff (NHS Property Services) who placed inside the Pathology Sample Box which is held in office behind reception. The bag contained 23 Chlamydia Samples from Children labelled with PID.

Later on in February the staff member was advised by the Chlamydia Screening Office that the Chlamydia samples had not been received by The Pathology Department as there was no record of any being processed, therefore indicating the samples had never been received.


18-Nov-14


Patient transferred between hospital sites within Pennine Care with only some history sheets and a copy of Mental Health Act paperwork. Subsequent request for notes lead to notes being lost in transit.

NHS Clinical Record

SOUTH DEVON HEALTHCARE NHS FOUNDATION TRUST

29-Oct-14


A trainee doctor was asked by Consultant to email a statement to her non-NHS email address. Trainee sent email at 15.29 from own NHS email address to the requested address but misspelt the address resulting in it being sent to a third party. The email contained an attachment with a patients name within the report. (Normal practice is to use initials not full name so patient cannot be identified).

The third party replied at 15.58 informing sender (trainee) of receipt of email in error.

At 18.41 trainees replied to third party thanking him for informing her and asked him to delete the email.

Attachment contained forename and surname of patient and medical information relating to clinical care of the patient.

THE NEWCASTLE UPON TYNE HOSPITALS NHS FOUNDATION TRUST

09-Oct-14


Records relating to a child cannot be found. They were last tracked to Children’s Hospital in July 2012. Solicitor has asked for a sworn affidavit detailing the attempts to locate the records.

Patient records belonging to a child.


05-Nov-14


A school nurse emailed a list of 157 children to 10 schools throughout the borough containing child's full name, dob, school attended and their status

child's full name, dob, school attended and their status in relation to school health identifying them as:

14


in relation to school health identifying them as:

Children with a safeguarding planLooked after childrenChild in Need or CAFSupervised cases.

The email was sent to unsecure addresses e.g. office@xxxschool and the file was not password protected. The attachment contained information relating to all schools and not personalised to each school. This is a breach of Trust policy.

Children with a safeguarding planLooked after childrenChild in Need or CAFSupervised cases.

Derbyshire Community Health Services NHS Trust (East Midlands)

17-Nov-14


On 25th October a member of the public returned two sets of notes to Hinckley hospital. One set related to a DCHS planned care patient. The second sets were of a child in the care of the health visiting service run by another trust. The site is operated by Interserve and houses multiple providers.This is the third such incident affecting DCHS patients at the site and the trust believes this is a malicious series of actions. To that end security procedures have been changed along with a tightening of physical security. The police have also been informed. Full investigations have been undertaken from the previous instances.

Patient notes.

COUNTESS OF CHESTER HOSPITAL NHS FOUNDATION TRUST

11-Dec-14


This incident will be investigated within the guidelines of the Trust's Disciplinary Policy.

patient namelocal patient ID numberpatient ageadmission to hospital dateestimated discharge datesensitive clinical information


17-Nov-14


On Friday 2nd August 2 sets of medical records had been handed in to a local GP practice, that had been found in Earl Shilton, which is a village about 5/6 miles outside of Hinckley. The records were found on a footpath by a member of the public. These records were confirmed to be Hinckley Hospital medical records.

Two sets of outpatient notes.

15


.

HOMERTON UNIVERSITY HOSPITAL NHS FOUNDATION TRUST

24-Oct-14


A letter (post marked 2.7.13) sent from HUH has been received by the patient. The patient showed the unopened envelope which exposes confidential medical information. The letter has been folded incorrectly so the second page was displayed. The address was all on one line and then underneath was the clinical information.The patient said that other people in the house would have seen this confidential information.

service user information - letter


17-Nov-14


The failure in the pipework in the roof space of one of our premises caused a severe flood which damaged clinical notes securely stored within the building.

Around 6000 Clinical notes pertaining to NHS patients have been affected

NORTH EAST AMBULANCE SERVICE NHS FOUNDATION TRUST

27-Oct-14


5 111/999 call recordings containing PII have been sent unencrypted from NEAS Outlook accounts to personal accounts.

Full 111/999 call recording including name, address, DOB, telephone number, specific medical condition relating to patient.

Information Governance Assurance Directorate

External IG Delivery Team

Health and Social Care Information Centre

16

_report... · web viewa considerable amount of notes left in a car both in the boot and on show....

Documents