Welcome Guest | Login | Register | Why Register? |
Newsletter RSS Twitter
30 July 2010 | 11:53 GMT


HOME | CONTACT | NEWS | DOCUMENT LIBRARY | FEATURES | OPINION & ANALYSIS | EVENTS | RESEARCH REPORTS | CASE STUDIES
View reders comments View (4)
comments
Add a comment Add a
comment
Send to a friend Send to
a friend
Print this page Print

Journalists warned of possible ECS breach

Tags: consent   ECS   GP   reporting   Scotland   Summary Care Record  

08 Dec 2008

Seven BBC journalists have been told that information held on their Emergency Care Summary in Scotland may have been inappropriately accessed by a doctor.

NHS Fife wrote to the seven after discovering that a doctor working for it may have accessed the records. The health board notified Fife Police and the clinician involved has now been reported to the Procurator Fiscal.

Jackie Bird, a newsreader on Reporting Scotland, was among those who were contacted. She told the BBC: “I wondered why NHS Fife was getting in touch with me and when I read the letter, which was obviously intended to allay fears, the more fearful I became. It was a strange feeling that someone unknown could have accessed my private information.”

The ECS is uploaded from GP systems every night and holds information on demographic details, current medications and allergies for 5.1m patients. Information is uploaded using an implied consent model plus ‘consent to view’ at the time of each medical encounter, a system which has recently been adopted for the Summary Care Record in England.

In its e-health strategy published three months ago, NHS Scotland said the ECS is currently accessed on 25,000 care occasions a week.

A statement issued by NHS Fife said that during early October 2008, the health board notified Fife Police that a doctor employed by the organisation may have misused access to NHS electronic records.

It added: “No patient data was lost to the NHS and patient care has not been compromised. Senior clinicians within NHS Fife have notified the patients whose records may have been accessed.”

The health board said a further statement would be made once all legal and possible employee conduct issues had been concluded.

 

Fiona Barr

© 2008 E-HEALTH-MEDIA LTD. ALL RIGHTS RESERVED.

Reader's Comments
Add a comment
Reader's Comments

1

The advantage of an electronic trail

09 Dec 08 23:12

I expect we will have the usual comments about the dangers of electronic records, but we should also remember that it was because they were electronic records that this doctor was caught. Short of DNA analysis of all paper records, we are blithely ignorant of who actually looks at those records. We know records are abused, but it is one of Rumsfeld's 'known unknowns' - perhaps now it will become more of a 'known known' and more effectively monitored as a better deterrent to abuse. Equally, seeing the record inappropriately is not the worst abuse, too many paper records are conveniently 'lost' when patients start seeking evidence about possible mistakes. This is actaully a good sign that things are improving in terms of information governance - though possibly from a low base.


2

Consent to view?

10 Dec 08 09:12

If consent to view is required how did the doctor get past that? Just confirms to me that I don't want anything to do with me going on the spine. This government cannot safeguard any information as they have proved time and time again.


3

Reassuring

grant.forrest@nhs.net

10 Dec 08 12:12

Agree totally with poster#1. The journalists were probably shocked initially when they heard about the incident but on reflection, we should be reassured rather than concerned. I hope the punishment of this individual reflects the serious nature of the incident. It should be a reminder that although electronic patient records have the convenience factor, inappropriate access is a crime.


4

consent to view and audit trails

stressfreedave@hotmail.com

10 Dec 08 13:12

The consent to view is only a verbal thing. If they ask you and you say yes they open the record. There is nothing like passwords involved meaning the only thing stopping access is they say they will not.

The electronic trail bit is a good point but there are 2 things. 1) when a reporter was on the phone she asked when her record had been accessed and the person on the phone could not say when it was accesed only that it had. The time it took for patients to find out also raises questions about the secuity back up procedures that were meant to be in place. If a patients ECS is accessed, the admin staff at their practice were meant to be informed that the record was accessed and by who. 2) it is a bit late. Gaining access to information is not like stealing a car. The car can be given back but the person who accessed your data will always know. Having the trail does help but it is often seen as a substituute for preventing access

Search
News Features Jobs Newsletters
EHI Primary Care Tweets
EHI Primary Care Tweets

Featured_recruiters
Featured_recruiters