Wednesday, 28 August 2013

FoI response - check for PID

Make sure you check that your FoI responses do not contain Person Identifiable Data. Otherwise you breach the DPA 1998; and the FoI Act 2000 actually. Http://identity.governmentcomputing.com/news/ico-fines-islington-council-over-leak-of-residents-data

Wednesday, 7 August 2013

GPs to tell patients about data extraction

I wonder how GPs are going to manage to tell all their patients about the opt-out option for the GP data extraction.

http://www.independent.co.uk/life-style/health-and-families/health-news/gp-surgeries-must-inform-patients-about-data-plan--or-face-legal-action-8748999.html

I am not sure if it would have been easier (and cheaper) for NHS England and HSCIC to book some advertisement space in newspapers and on local radio?

Sunday, 9 June 2013

Do you know where your records are?

NGS England has a job on hand to identify all those old records storage facilities. This incident and fibe does not surprise me. I assume that more fines are on the way.

Let's wait and see... Failure in sweep of old premises costs health body £100,000 in data breach fine

Sunday, 17 February 2013

Monday, 28 January 2013

Oh no, not another one

Patients' private files dumped http://www.bbc.co.uk/news/uk-wales-21177311

Tuesday, 1 January 2013

Privacy Problem with Facebook

What are these guys at Facebook thinking? No proper testing. No ITIL and ISO 27001/2 compliance.

http://news.sky.com/story/1031892/facebook-new-year-message-flaw-found

Come on, you can do better than that. Fast is not always better.

Just shows that there is no real privacy on social media. Only put stuff on Facebook, Twitter et al that you are happy to share with everyone on earth.

Happy 2013.