Loss of sensitive personal data.
Loss of an unencrypted memory stick by a medical student.
Undertaking issued to ensure that students are provided with sufficient training and that the security of personal data is sufficiently monitored.
Reason for action
It was assumed that the medical student had already received sufficient data protection training. Sensitive data was copied from an encrypted memory stick provided by the hospital to an unencrypted personal memory stick.
07 September 2011.
View PDF of the University Hospital of South Manchester NHS Foundation Trust Undertaking (Via ICO Website)
View PDF of the University Hospital of South Manchester NHS Foundation Trust Undertaking (Breach Watch Archive)