ROYAL Information Nine patient letters were Nine post clinic letters BERKSHIRE NHS less incorrectly sent to a patient’s patients address. FOUNDATION than 11 address rather than the GP TRUST individuals surgery. Part of the GP address was included on the envelope but the remaining address was a patient's address. NHS Newbury and Information A Committee paper was found to NHS Number District CCG about contain an embedded document Date of which in turn contained approx. Surgery Name 2500 NHS numbers and individuals associated Dates of Birth. The Committee papers had been sent to all Fiance & QIPP Committee members via NHS.Net email accounts (encrypted), except for 2 lay members who received the papers into a non NHS.net account . CUMBRIA Information A review of the GP Practice Investigation hasfound PARTNERSHIP about codes stored by PCIS showed that there were 5822 NHS that it used national children where the GP FOUNDATION organisational code service was different on TRUST individuals (OCS) codes (e.g. A82021). As CCH2000 than it was the target system accepts on the national spine national codes, the practice and potentially 3200 codes in PCIS were used to children whose migrate the data. No mapping vaccination and or translation was performed on immunisation schedule the GP Practice Codes they were were not correctly migrated "as is" from the PCIS configured on the system. This showed that there CCH2000 system. was no discrepancy between PCIS code and the CCH2000 code, however, highlighted that there were a significant number of children where the GP had not been updated within the system due to lack of notification. Issue particularly relates to pre-school NORTHERN Information At a meeting, copies of theatre Theatre with DEVON about lists with patient identifiable data patient identifiable data HEALTHCARE were circulated to both hospital were circulated to both NHS TRUST individuals and Sodhexo staff. hospital and Sodhexo It is not currently known how this staff. information became available at the meeting, but it appears that emailed information may have been forwarded, and subsequently hard copies printed. The information was originally emailed by a Service Manager to a Divisional Manager and Director of Ops, and
ROYAL BERKSHIRE NHS FOUNDATION TRUST Information less than 11 individuals Nine patient letters were incorrectly sent to a patient’s address rather than the GP surgery. Part of the GP address was included on the envelope but the remaining address was a patient's address. Nine post clinic letters patients address. NHS Newbury and District CCG Information about individuals A Committee paper was found to contain an embedded document which in turn contained approx. 2500 NHS numbers and associated Dates of Birth. The Committee papers had been sent to all Fiance & QIPP Committee members via NHS.Net email accounts (encrypted), except for 2 lay members who received the papers into a non NHS.net account . NHS Number Date of Surgery Name CUMBRIA PARTNERSHIP NHS FOUNDATION TRUST Information about individuals A review of the GP Practice codes stored by PCIS showed that it used national organisational code service (OCS) codes (e.g. A82021). As the target system accepts national codes, the practice codes in PCIS were used to migrate the data. No mapping or translation was performed on the GP Practice Codes they were migrated "as is" from the PCIS system. This showed that there was no discrepancy between PCIS code and the CCH2000 code, however, highlighted that there were a significant number of children where the GP had not been updated within the system due to lack of notification. Issue particularly relates to pre-school Investigation hasfound that there were 5822 children where the GP was different on CCH2000 than it was on the national spine and potentially 3200 children whose vaccination and immunisation schedule were not correctly configured on the CCH2000 system. NORTHERN DEVON HEALTHCARE NHS TRUST Information about individuals At a meeting, copies of theatre lists with patient identifiable data were circulated to both hospital and Sodhexo staff. It is not currently known how this information became available at the meeting, but it appears that emailed information may have been forwarded, and subsequently hard copies printed. The information was originally emailed by a Service Manager to a Divisional Manager and Director of Ops, and Theatre with patient identifiable data were circulated to both hospital and Sodhexo staff.