Loss of sensitive personal data on two occasions.
A patient’s records had not been indexed.
Undertaking issued to ensure sufficient measures are put into place for the storage and security of physical records.
Reason for action
Not all records held by the data controller were indexed.
18 July 2011.