(copies of prescriptions for our clients on Denzapine) 8. Miscellaneous correspondence 9. XXX and XXX annual appraisals 10. Neb’s private file (courses she has been on – certificates) annual leave/study leave applications etc. NORTHAMPTON GENERAL HOSPITAL NHS TRUST 30-Jul-14 Information about 51-100 individuals A member of staff sent an email containing the number of expected deaths that were not recorded on the end of life care register to members of the end of life strategy as requested at the last meeting. The individual thought all the identifiable patient data had been removed but had not. This resulted in personal information about patients who had died being sent to the CCG on named email account • NHS Number • Patient's full name • Date of Birth • Diagnosis (in a few cases) • Date of Death BARNET, ENFIELD AND HARINGEY MENTAL HEALTH NHS TRUST 16-Sep-14 Information about individuals As part of a service reorganisation admin staff has recently moved offices. A filing cabinet containing 27 patient medical records had been left in the vacated locked office in preparation for July outpatient clinics. When the medical records clerk went to retrieve some of the records from the filing cabinet she discovered that the cabinet had been removed. On further investigation she was made aware that the cabinet was removed by an external company on the instructions of the Trust'sXXXXXX , on the assumption that the cabinet was empty. The XXXXXX has confirmed that only the top drawer of the cabinet was empty. After an extensive search we are unable to locate the records in any other areas. On initial questioning both parties involved in removing the cabinet confirmed that they had checked that the cabinet was empty, however it has now transpired that neither parties had checked. An investigation is now underway. Patient medical records containing personal sensitive data relating to their mental health CHESHIRE AND WIRRAL PARTNERSHIP NHS FOUNDATION TRUST 07-Aug-14 Information less than 10 individuals New employer liability claim form containing details of new claim and DATIX incident form containing sensitive patient mental health information accidentally emailed to member of the public. Email sent to member of the public in error. Human Email containing details of new employer liability claim, employer liability claim form and DATIX incident form
member immediately returned to the premises to collect the document and apologise to the patient. The NCH&C Trust Policy precludes the use of handover documents away from base. The staff member had completed their mandatory Information Governance Training programme within the previous 12 month period. . blood pressure, temperature and pulse recorded against their name. Four patients had future clinic appointment times and dates beside their name. KENT COMMUNITY HEALTH NHS TRUST 16-Sep-14 Information about 11-50 individuals Request was received from the authority for a case conference report for a child. The service had not seen the child for a while, but compiled the report and as was usual practice, sent a copy to the parents to the address that they had on record. The address that was on record was not correct, and although the service checked on their system and the National Spine, the service did not check that this was the same address that was on the request for the information. Although the report was sent private and confidential, with a return address on it in case of wrong delivery, the recipient at the wrong address opened the report. The person's name, d.o.b, gender, ethnicity, NHS number, GP surgery and address. There was also information about height and weight measurements, immunisation status and 2 A&E attendances. There was also the mother's name d.o.b, gender, ethnicity, relationship to child and address. UNIVERSITY HOSPITALS OF MORECAMBE BAY NHS TRUST 28-Jul-14 Information about less than 10 individuals Patient's partner read the Parental Vulnerability Documentation (Cause for Concern) regarding his domestic violence and controlling behaviour as the patient's hospital notes were left in the delivery room. Medical Records Croydon Health Services NHS Trust 29-Sep-14 Information about 51-100 individuals Patient A , got home and discovered she had a discharged letter belonging to Patient B. Concerned about delays in Patient's B care, the discharged summary was sent to the GP address by Patient A, using information in the letter. Full Patient demographics, Diagnosis, GP contact details. Details of medication NOTTINGHAM UNIVERSITY HOSPITALS NHS TRUST 03-Jul-14 Information about 11-50 individuals An email was received from a patient's parent informing us that they had received a letter addressed to a local Doctor in regard to another child. This letter had been attached to the back of a letter correctly addressed and intended for this patient's parent Letter contained patient demographics and medical condition of the child/patient.
(a social care organisation), and was opened by persons not authorised to see the information. The two pieces of information were then sent back to this organisation SOUTH TEES HOSPITALS NHS TRUST 22-Aug-14 It is believed that these were stolen from the car of a consultant who lived nearby. A mix of a 28 sets of full patient notes / radiotherapy notes relating to a total of 24 patients. CHESTERFIELD ROYAL HOSPITAL NHS FOUNDATION TRUST 09-Sep-14 It was reported at 2.30 pm on Friday Oct 11th 2013 that it was believed a community nurse's case with four sets of patient notes had been mislaid, last known sight on Wednesday evening, 9th October 2013 Following investigation which included a review of CCTV footage, and staff member's discussion with neighbours it is now felt likely that the case was stolen from outside their house on Thursday morning. The case was locked at the time of loss/theft. A further review of the office filing cabinet where the files are stored revealed that there were actually 7 sets of patient notes involved; Plus 3 work diaries. These all contained patient information. 7 Paper files containing NHS patient data; sensitive, personal and confidential information about the patients. 3 work diaries containing personal information, dating from 2010. All data was in a locked, heavy duty case at the time of loss/theft. NOTTINGHAM UNIVERSITY HOSPITALS NHS TRUST 03-Jul-14 Patient contacted a known nurse and said that she believed a member of staff had accessed her medical information and passed details to a 3rd party as the 3rd party knew information that they could not have known otherwise. Patient gave a name and department of the staff member Details of the information disclosed not known at the moment SURREY AND BORDERS PARTNERSHIP NHS FOUNDATION 13-Aug-14 The fax included demographic details Name, Address, DOB and NHS Number. The fax was sent to a private company. The fax also included reason for referral (as an acronym) and confirmed the person was known to services in a previous year. The company was contacted and was assured the fax had been shredded. The person who uses our services has been notified. Name, Address, DOB and NHS Number. The fax was sent to a private company. The fax also included reason for referral (as an acronym) and confirmed the person was to services in a previous year.