clinic letter was available via an internet search engine. On review 63 patient letters were available on files on a FTP site. We contacted our contracted transcribing company, dScribe, to alert them and within 30 minutes the files containing these letters were blocked and therefore no longer accessible. A subsequent request by dScribe has been made to Google to take down the relevant pages. letters contained a name only with no other identifiers. Eight patient letters with full identifiers, including name, date of birth and address. Letters were post clinic letters from consultant to GPs. Company has been asked to provide us with full details as part their investigation report back to the Trust. VOCARE Information individuals Email containing patient sensitive and identifiable information sent from NHS.uk email box to NHS.net box. both emails in N3 connection Email containing patient sensitive and identifiable information sent from NHS.uk email box to incorrect NHS.net box 970 names addresses ethnicity, ages, presumptive diagnoses of patients MID STAFFORDSHIRE NHS FOUNDATION TRUST Information about less than 11 individuals Breach of patient confidentiality involving part of one patient's medical records being provided to another patient. NHS patient data. Lincolnshire Community Health Services NHS Trust Information 11-50 individuals Burglary 16.07.14. Offenders took encrypted laptop and laptop bag, Trust Mobile Phone, diary and within laptop bag contained a waiting list of approx. 20 Diabetic Patients. Laptop is encrypted so no risk to any data. Waiting List of approx. 20 NHS Diabetic Patients contained Name, Address, DOB and general comments such as 'Insulin' or 'Requires Appointment'. BLACKPOOL TEACHING HOSPITALS NHS FOUNDATION Information about individuals Case notes and dictation tapes from out-patient clinics are transported by the portering service to the secretaries. A number of days had passed before it was noted that the tape was missing. A thorough search of the Out-patient areas was undertaken and all relevant members of staff have been included in the investigations. The tape has not re-surfaced. The data lost is clinical information dictated about a patient after an Out-patient appointment. THE NEWCASTLE UPON TYNE HOSPITALS NHS Information about A spreadsheet containing patient identifiable data and clinical data for 1997 patients was sent in to the wrong NHS address. The Demographic and some limited genetic data.
FOUNDATION TRUST individuals data was sent securely from nhs.net to nhs.net however to the wrong recipient. The individual receiving the data immediately informed the Trust and deleted all copies of the data. Croydon Health Services NHS Trust Information about individuals The Birth register covering dates from April 2009 to May 2010 cannot be located with the other registers which are stored in PDM office. Searches conducted include: Full search of PDM office, Labour ward resource room, Obstetric theatre, Store room on Labour ward checked again. Staff groups which may have required the register e.g. Audit dept. Risk Management team , Legal Dept. asked to check if the register was with them Names and addresses , type of birth and details of the baby , mother and babies condition UNIVERSITY HOSPITALS OF MORECAMBE BAY NHS Information about individuals Patient was discharged with a discharge summary to take home. When the envelope was opened they also a 4 page handover sheet which contained name, RTX, date of birth, clinical issue, investigations and plan for 35 patients, including themselves, over several wards. Handover sheet which included name, RTX, date of birth, clinical issue, investigation and plans. Solihull Metropolitan Borough Council Information less than 11 individuals A mental health report was with the court and the court shared a copy of the report with the data subjects ex-partner Personal data relating to a mental health assessment HEART OF ENGLAND NHS FOUNDATION TRUST Information about less than 11 individuals Member of staff accessed records of person known to her NHS patient data THE NEWCASTLE UPON TYNE HOSPITALS NHS FOUNDATION TRUST Information about less than 11 individuals A large pack of data from an HR record was scanned and sent to Trust solicitors. A letter which formed part of the HR record but was not releasable to solicitors was scanned onto the reverse side of a document which was due to go to the solicitors and then sent with the full pack of documents. A scanned letter containing medical information which had been sent to the HR department as part of the occupational health report. BIRMINGHAM CHILDREN'S HOSPITAL NHS FOUNDATION TRUST Information about individuals A clinical handover sheet headed Haematology was found outside the law courts in Birmingham. Data includes patient name, hospital number, date of birth, list of current problems, results, drugs, plan of care, handover notes. BRADFORD DISTRICT CARE TRUST Information about less than 11 individuals Worker sent material, including Occupational Health records, to Health and Care Professions Personnel data
Council. The release had not been authorised by the Trust. TEES AND HARTLEPOOL NHS FOUNDATION TRUST Information about less than 11 individuals A clinic letter to GP relating to an year old child was copied to the parents of the child. An error led to the patient's address being recorded as 8 instead of 28. The letter contained clinical information from the child's attendance and also family history information regarding adoption and birth family Letter containing Information from clinic attendance plus information relating to adoption and birth family NORTH TEES AND HARTLEPOOL NHS FOUNDATION TRUST Information about less than 11 individuals Patient correspondence sent to address due to typing error. Recipient returned letters to named GP practice who in turn returned letters to the Trust. Correspondence sent to patient address due to a typing error made by a secretary. Patient lives at number 22 and copies of GP letters were sent to number 2. Resident of number 2 opened the letters, realised the error and returned them to the GP practice named in the letters. The GP practice forwarded the letters back to the Trust upon receipt. The Trust received the letters from the GP practice on the 22/5/2014 upon which the incident was immediately reported. Immediate investigation found that the letters contained sensitive information regarding the patient whom is a minor which included results of genetics testing which also made reference to the mother. The letters (a referral to the Genetics Service and a letter to the GP informing of test results) contained sensitive information regarding the patient whom is a minor which included results of genetics testing which also made reference to the mother. The letters contained the patients name and date of birth. Derbyshire Healthcare NHS Foundation Trust Information about less than 11 individuals Community Psychiatric Nurse reported that service user PW informed her that whilst an In Patient at the Hartington Unit she had accessed the Staff Office and Nursing Station and removed paperwork from the notes of a number of other patients. PW has refused to disclose what she took or what she did with it. PW had done this previously during admission but staff had been able to retrieve the paperwork on that occasion. In Patient records- details unknown as the service user refuses to disclose what she has taken
more detailed PID in the back of the diary. Social Services (one record). BIRMINGHAM CHILDREN'S HOSPITAL NHS FOUNDATION TRUST Information about individuals A clinical handover sheet belonging to PICU was found in the Street in Birmingham City Centre. The handover sheet contains details of 29 children as follows, bed number, name unit and unit days, date of birth and age, diagnosis, date of arrival on PICU and source, notes and BCH and PICU consultants. The sheet was found by a member of PICU staff who informed his manager and completed an incident reporting form. Bed Number, Name PICU Unit and PICU Unit Days, Date of birth and age, Diagnosis, Date of Arrival on PICU and Source, Notes, BCH & PICU Consultants LANCASHIRE CARE NHS FOUNDATION TRUST Information less than 11 individuals Team alerted by a teacher from a local primary school, served by the Children and Family Health Service, to say that a parent had contacted the school. This followed the parent receiving an envelope containing information to support his children with healthy eating; this had been left by the school nurse for him to pick up from the school. Personal details e.g. names of children, highly sensitive and confidential safeguarding information relating to a child protection plan and serious injury. BRADFORD DISTRICT CARE TRUST Information about less than 11 individuals Information about patients with the same name and date of birth entered in each other's records. Detailed information at risk e.g. clinical/care case notes, social care notes High risk confidential information MERSEY CARE NHS TRUST Information about individuals An envelope was collected from the Ashworth Hospital, Parkbourn, Maghull, L31 1HW High Secure Mailroom by Mersey Care Transport Driver on 18.2.14. The envelope was to be transported to the V7 Building, Kings Business Park, Prescot, L34 1PJ by the Trust local transport service however, it was put into the Royal Mail sack. The envelope was addressed "Patients Cash V7" and due to the lack of a full address or postcode it was opened in the Royal Mail sorting The information that was potentially at risk was patients personal information which related to their names, wards, Ashworth Hospital, and financial instructions for the Cash Office to process and action on their behalf
office in Warrington to identify the sender the contents were secured re-packaged and returned to the V7 Building, Kings Business Park, Prescot on 19.2.14 am. The trust acknowledges that the Royal Mail is a privatised company & that patient’s confidentiality was compromised. KENT COMMUNITY HEALTH NHS TRUST Information about less than 11 individuals On 18 February a clinical letter to a patient’s GP was faxed in error to a local family-run haulage company. The clinical letter contained the patient’s contact details, NHS number, date of birth, information about diagnosis, medications, a summary of the issues, and the management plan in relation to their medical condition. The clinical letter contained the patient’s contact details, NHS number, date of birth, information about diagnosis, medications, a summary of the issues, and the management plan in relation to their medical condition PENNINE CARE NHS FOUNDATION TRUST Information about less than 11 individuals Records were required for court on 21/02/2014. All Mental Health medical volumes were located. However clinical information covering a span of 3 years could not be located for community mental health. The service that has provided care for this patient during this time period had been disbanded. The risk is that it may be detrimental to the client who may suffer significant distress. NHS patient data Lincolnshire Community Health Services NHS Trust Information about individuals Instead of decanting the specimens into the approved clear Specimen Bags as planned, an Orange Waste Bag was used and passed to Reception Staff (NHS Property Services) who placed inside the Pathology Sample Box which is held in office behind reception. The bag contained 23 Chlamydia Samples from Children labelled with PID. Later on in February the staff member was advised by the Chlamydia Screening Office that the Chlamydia samples had not been received by The Pathology Department as there was no record of any being processed, therefore indicating the samples had never been received. PENNINE CARE NHS FOUNDATION TRUST Information about less than 11 individuals Patient transferred between hospital sites within Pennine Care with only some history sheets and a copy of Mental Health Act paperwork. Subsequent request for notes lead to notes being lost in transit. NHS Clinical Record
damaged clinical notes securely stored within the building. NORTH EAST AMBULANCE SERVICE NHS FOUNDATION TRUST Information about less than 11 individuals 5 111/999 call recordings containing PII have been sent unencrypted from NEAS Outlook accounts to personal accounts. Full 111/999 call recording including name, address, DOB, telephone number, specific medical condition relating to patient. Information Governance Assurance Directorate External IG Delivery Team Health and Social Care Information Centre