NHS loses patients' records

PERSONAL information including the medical histories of 137 Edinburgh patients has been lost by a health service worker.

Copies of letters sent to central Edinburgh GPs by NHS Lothian over two years have been stored on a USB memory stick which has gone missing.

The community worker involved raised the alarm after realising the memory stick had vanished.

NHS Lothian called in the police and contacted the patients involved as soon as it was clear the information was lost.

The health board has apologised to the patients and is offering them face-to-face meetings to try to respond to their concerns.

The community worker, who has not been identified, faces disciplinary action as it is against NHS Lothian rules to store confidential information in such a way.

The letters are likely to contain the medical history of people who lived in and around the central Edinburgh area between June 2006 and June 2008.

The patients would have included men and women, all over 18 and under 65 at the time the letters were written, but NHS Lothian has released no further details in order to protect their identity.

Peter Gabbitas, NHS Lothian's director of health and social care, said: "A member of staff has reported losing a memory stick of their own which they were using to store information about patients. It's important to remember that the staff member came to us of their own volition to advise us of this contravention of our policy.

"Any threat to patient confidentiality is very serious and management took action as soon as they were informed.

"Our own IT security specialists were called in and a special investigation team which included highly experienced doctors and nurses was formed to identify every patient whose confidentiality may be at risk.

"At the same time the premises where the staff member was based were thoroughly searched.

The information commissioner was also fully informed about the loss. I would like to take this opportunity to apologise again to the patients involved."

The staff member involved is understood to be an experienced and respected community worker.

A helpline has also been set up for patients who are being offered full support and advice, although there is no evidence the data stick has been stolen or any information disclosed.

Dr Jean Turner, chief executive of the Scotland Patients Association, said: "Personal information is extremely precious to patients. They will be very upset to learn it has gone missing."

Margaret Curran MSP, Scottish Labour health spokeswoman, said: "This is deeply concerning and action needs to be taken immediately to retrieve this information.

"It follows quickly on the heels of data being lost in the ambulance service and raises real concerns about how personal information is being managed in the National Health Service in Scotland."

A Scottish Government spokeswoman said: "We are aware of this matter and understand that NHS Lothian continues to investigate.

"We take any loss of patient information extremely seriously which is why there are data protection procedures and guidance in place which all those working in the NHS are required to follow."

• www.nhslothian.scot.nhs.uk
• www.scotlandpatients.com