Unnecessarily sharing of sensitive personal data
How much
917 records
Why
An excessive amount of data was emailed to another Trust partner via a non-secure email account
Regulator
ICO
Regulatory action
Undertaking issued to ensure that staff are given sufficient training and that only the minimum data for the intended purpose is extracted or transferred.
Reason for action
The spreadsheet containing the records was not passport protected and the department had no “business need” to have access to the clinical data.
When
15 June 2010
Links
View PDF of the Basingstoke and North Hampshire NHS Trust Undertaking (Via ICO Website)
View PDF of the Basingstoke and North Hampshire NHS Trust Undertaking (Breach Watch Archive)