by a member of the public who contacted the Trust to report it. IGI/4106 Ballater Surgery 20-Aug-15 4000 The surgery’s bi-annual newsletter is Patient email addresses emailed to all patients email revealed to 4000 patients addresses we hold. This has been done on many occasions in the past, using bcc and is considered a routine procedure, so therefore no special measures were in place. Patients can also subscribe to the newsletter via our website which they then receive securely. The email addresses were downloaded from EMIS to Excel to be made ready (semi-colon to be inserted between names) for a mass email to be sent. There were 4159 email addresses on file. Due to the volume this was split into 4 separate emails. The email addresses were copied and pasted into the box and not the bcc ‘to’ box, for each of the 4 emails sent. On the fourth occasion the person sending the email realised what they had done and alerted the Practice Manager. At the same time the recipients of the first email starting calling and emailing back to alert us to the error we had made. The PM contacted the MDU for advice, who advised to send another email (this time bcc) explaining we had made a data
by a member of the public who contacted the Trust to report it. IGI/4106 Ballater Surgery 20-Aug-15 4000 The surgery’s bi-annual newsletter is emailed to all patients email addresses we hold. This has been done on many occasions in the past, using bcc and is considered a routine procedure, so therefore no special measures were in place. Patients can also subscribe to the newsletter via our website which they then receive securely. The email addresses were downloaded from EMIS to Excel to be made ready (semi-colon to be inserted between names) for a mass email to be sent. There were 4159 email addresses on file. Due to the volume this was split into 4 separate emails. The email addresses were copied and pasted into the ‘to’ box and not the bcc box, for each of the 4 emails sent. On the fourth occasion the person sending the email realised what they had done and alerted the Practice Manager. At the same time the recipients of the first email starting calling and emailing back to alert us to the error we had made. The PM contacted the MDU for advice, who advised to send another email (this time bcc) explaining we had made a data Patient email addresses revealed to 4000 patients
2015-Q3%20_Report%20of%20HSC%20Closed%20Level%202%20IG%20Serious%20Incidents_July%20to%20Sept%202015.docx