Royal Wolverhampton Hospitals NHS Trust has been found in breach of the Data Protection Act after leaving a CD at a bus stop.
The CD, which contained scans of 112 patient records from the Intensive Care Unit of New Cross Hospital's Heart and Lung Unit, was found at a bus stop near the hospital.
The Information Commissioner's Office (ICO) was informed that the CD had neither password protection. Nor was it encrypted.
In an investigation into the incident, neither the ICO nor even the Trust were able to establish where the CD had come from or why it had been made.
"The fact that this information was several years old is of no consequence patients' personal data should always be handled in accordance with the Data Protection Act," said Mick Gorrill, head of enforcement at the ICO.
The trust has agreed to take remedial measures to ensure a similar incident does not reoccur.
The NHS is now infamous for misplacing sensitive data. In May, it emerged more than 1,000 data breaches involving personal data had been reported to the ICO, with the NHS ranked as a top offender.
To date, no financial penalty has been levied on the organisation. The trust has not issued any statement following its censure by the ICO, but in its own annual accounts it admitted to nine data loss incidents in the 2009-2010 financial year. None, though, qualified as "Serious Untoward Incidents", in NHS parlance.
-
Palo Alto Networks snaps up CyberArk in identity security pushNews The acquisition marks the latest in a string for Palo Alto Networks
-
Stack Overflow CEO Prashanth Chandrasekar on embracing AIQ&A The chief executive at the well-known developer resource Stack Overflow talks future strategy and how AI has forced the company to shift its focus
-
The NCSC wants you to start using password managers and passkeys – here’s how to choose the best optionsNews New guidance from the NCSC recommends using passkeys and password managers – but how can you choose the best option? ITPro has you covered.
-
23andMe 'failed to take basic steps' to safeguard customer dataNews The ICO has strong criticism for the way the genetic testing company responded to a 2023 breach.
-
Two more NHS Trusts have been hit with cyber attacks – here’s what we know so farNews A flaw in a third-party device management tool appears to be the source of the incident
-
NHS England launches cyber charter to shore up vendor security practices
News Voluntary charter follows a series of high-profile ransomware attacks
-
NHS supplier hit with £3m fine for security failings that led to attack
News Advanced Computer Software Group lacked MFA, comprehensive vulnerability scanning and proper patch management
-
Cyber attack delayed cancer treatment at NHS hospital
News A cyber attack at Wirral University Teaching Hospital in 2024 delayed critical cancer treatment for patients, documents show.
-
I love magic links – why aren’t more services using them?Opinion Using magic links instead of passwords is safe and easy but they’re still infuriatingly underused by businesses
-
Password management startup Passbolt secures $8 million to shake up credential securityNews Password management startup Passbolt has secured $8 million in funding as part of a Series A investment round.
