received the fax in error and stated the information had been destroyed as per the instructions on the fax front sheet. ROYAL CORNWALL HOSPITALS NHS TRUST Information about individuals The RIS results of patients who were not receiving treatment at the Trust were being uploaded against non-matching patients (although they were known to this Trust). This resulted in disclosure of sensitive patient activity without consent to staff at our Trust. The Trust interface engine was replaced earlier this year. The new interface to receive RIS results did not handle multiple RIS patient ids contained in the demographic section of the message. The new interface therefore did not handle correctly 3600 results from radiological examinations that did not take place within RCHT NHS Patient data. Including demographics and clinical results. NORTHUMBRIA HEALTHCARE NHS FOUNDATION TRUST Information about less than 10 individuals Inappropriate access to colleague’s pathology records by 3 x individuals. Pathology results PLYMOUTH HOSPITALS NHS TRUST Information about 11-50 individuals A data subject was handed printed information relating to their treatment and noticed a ward handover sheet had been printed on the reverse of the piece of paper. This was highlighted and handed back to staff on duty before the data subject left the ward. NHS Patient Data LEEDS AND YORK PARTNERSHIP NHS FOUNDATION TRUST Information about less than 10 individuals The care co-ordinator worked within a service sub-contracted to a 3rd party provider. The letter contained detailed mental health content. The letter was returned to the Trust but it was unclear whether it had been opened by the inappropriate recipient. The letter was misaddressed as 37 not 47, and thus delivered to a house in close proximity to the patient. The patient has been informed and has been distressed by events resulting in a partial relapse, reporting an inability to function following the news. A supportive meeting has been arranged with the care co-ordinator although we positively note that this will be between the patient and the care co-ordinator. A follow-up call is being made from the team’s management as the patient has been left to consider whether they wish to make a formal complaint. A detailed management fact-find has Mental health care record history summary, discharge plan, patient identity data.
ROYAL DEVON AND EXETER NHS FOUNDATION TRUST Information less than 10 individuals On the 28th July 2013 an incident was raised concerning the mislaying of a set of patient A patient had been taken from a ward to x-ray in an internal wheelchair by a porter. Following normal practice the patient notes are carried in a box attached to the back of the wheelchair. In this case the notes arrived at x-ray but did not return with the patient in the wheelchair used to return the patient. The patient notes were returned to the ward at xxxxx on xxxxxxx having been found in the notes box of another wheelchair. Patient Case Derbyshire Community Health Services NHS Trust (East Midlands) Information about individuals A trolley containing 82 sets of patients therapy notes has been removed from the Clay Cross site by a scrap man, on the xxxxxxx, on the approval of a porter. The notes were from the Therapy Unit and are from patients who have had falls, long standing neuro problems or have multi-pathologies and who needed additional therapy support. The vast majority of the patients were last seen between 2009 and 2012. The scrap man has given us almost complete assurance the trolley will now have been melted down together with the notes. The trolley was locked. The discovery of the missing trolley did not occur until the xxxxx. Patient notes from the Therapy service PLYMOUTH HOSPITALS NHS TRUST Information about less than 10 individuals A data subject received a letter from another data subject who had received their appointment letter in error and returned to them via the post. NHS Patient Data BIRMINGHAM AND SOLIHULL MENTAL HEALTH NHS FOUNDATION TRUST Information about less than 10 individuals Paper Care Plan containing NHS patient data about mental health services. During a visit by patient's CPN, patient found to be in the possession of another patient's care plan. CPN reported that patient had this information as it was contained within in a 'welcome pack' they had received from a Trust site where they had started to receive a service from. Care Plan contained clinical data. This happened when the patient was transferred from one ward to another. Personal data disclosed in error. UNIVERSITY HOSPITALS OF Information about 11-50 individuals We have been contacted once again by Lancaster City Council to inform us that 2 handover sheets Abbreviated clinical information on ward handover sheet
‘3, a maximum of 4’ sheets that were badly contaminated and were not therefore retrieved by LCC for examination and these have gone to the general waste site. These are not retrievable. Investigation on xxxxxxx identified a member of nursing staff living at the address in question. The incident was reported to senior nursing managers, Chief Information Officer, Caldicott Guardian and SIRO on the same day. The SIRO took the decision to ask Audit North West to investigate the incident on xxxxx after discussion with the SIRO. ANW commenced the investigation today xxxxxxx and confirmed to go ahead with SIRI report. BIRMINGHAM AND SOLIHULL MENTAL HEALTH NHS FOUNDATION TRUST Information 101-300 individuals Staff data emailed via insecure means. data included; Name, Date of birth, NI Number, Salary, Address (this is for 35 individuals) and pension details for some. An email was sent with regards to a TUPE process and new starters to the Trusts Payroll provider. This was via an insecure email as it was sent from a Trust BSMHFT email account to an NHS.net. The data included staff information and the root cause seems to be a lack of awareness by the staff member who sent the data. Norfolk Community Health and Care NHS Trust Information about less than 10 individuals Received a telephone call from the mother of a girl seen by the Community paediatrician for a child protection examination. She had received an appointment letter from the Community paediatrician for the child's next appointment. In the envelope alongside the letter was a page from another medical report I had completed which concerned possible sexual abuse of two other girls. Within report two names of children who received medical examination under safeguarding umbrella for allegation of sexual abuse; date of birth; names of foster parents and pre-school name. Within the report was detailed information relating to the examination of genitalia. PLYMOUTH HOSPITALS NHS TRUST Information about less than 10 individuals An email containing patient identifiable and medical information was sent on xxxxxxx from a healthcare professional. The NHS patient data including patient name, date of birth and clinical information.