GB NHS Surrey May 2012 Technical Error (Q10882)
From Open Risk Data
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English |
GB NHS Surrey May 2012 Technical Error
|
A data breach risk event
|
Statements
C3659813-3267-483F-B2B5-7CF3D9D2851F
May 2012
0 references
An NHS body has been told to pay 200,000 after over 3,000 patient records, including 2000 related to children, were found on a second-hand machine sold on an online auction site. TechWeekEurope understands that auction site is eBay. Yet a member of public contacted NHS Surrey in May 2012, saying they had bought a computer online and found it contained patient information, including records relating to around 900 adults and 2000 children. NHS Surrey then had to scurry around, finding another 39 computers sold by the data destruction provider, three of which still contained sensitive personal data. The NHS body didnt sign a contract with the provider and failed to determine whether the hard drives have been wiped, the ICO said. The majority of the hard drives put up for sale on the internet (English)
