an outpatient with no apparent clinical reason. Their outpatient and day accesses to these records were identified as an care eating outcome of the investigation of access audit log of disorders service. their EPR user account. The incident did not involve This is not an any data loss nor compromise security of the EPR. incident of data This is an isolated incident as regular randomised loss or disclosure. reviews of access to EPR have so far not identified The access a similar incident of this scale before. At the time of controls of the reporting, we believe the individual accessed 19 EPR system have patients' records. not been compromised. The data has not left the secure EPR system or the Trust network. IGI/3998 CENTRAL AND 25-Aug-15 1 An allegation was made that a member of staff Clinical records NORTH WEST accessed the clinical records of an ex-patient, who LONDON NHS had been working within their team. The member of FOUNDATION TRUST staff had no legitimate reason to access this record and so potentially this constituted a breach of Data Protection Legislation. IGI/3576 UNIVERSITY 19-Aug-15 117 117 patient records accessed inappropriately. Patient health HOSPITAL OF NORTH Patient records accessed belonged to friends, work record for 117 STAFFORDSHIRE colleagues, and some patients. Access appears to patients NHS TRU be for curiosity - there is no evidence that the information has been passed on or used maliciously.
an outpatient with no apparent clinical reason. Their accesses to these records were identified as an outcome of the investigation of access audit log of their EPR user account. The incident did not involve any data loss nor compromise security of the EPR. This is an isolated incident as regular randomised reviews of access to EPR have so far not identified a similar incident of this scale before. At the time of reporting, we believe the individual accessed 19 patients' records. outpatient and day care eating disorders service. This is not an incident of data loss or disclosure. The access controls of the EPR system have not been compromised. The data has not left the secure EPR system or the Trust network. IGI/3998 CENTRAL AND NORTH WEST LONDON NHS FOUNDATION TRUST 25-Aug-15 1 An allegation was made that a member of staff accessed the clinical records of an ex-patient, who had been working within their team. The member of staff had no legitimate reason to access this record and so potentially this constituted a breach of Data Protection Legislation. Clinical records IGI/3576 UNIVERSITY HOSPITAL OF NORTH STAFFORDSHIRE NHS TRU 19-Aug-15 117 117 patient records accessed inappropriately. Patient records accessed belonged to friends, work colleagues, and some patients. Access appears to be for curiosity - there is no evidence that the information has been passed on or used maliciously. Patient health record for 117 patients