GB Betsi Cadwaladr University Health Board Jul 2013 Technical Error (Q16393)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | GB Betsi Cadwaladr University Health Board Jul 2013 Technical Error |
A data breach risk event |
Statements
F91FA5AC-CDE1-4167-80EA-2C8891EBD7D6
July 2013
0 references
The Information Commissioners Office (ICO) has found Betsi Cadwaladr University Health Board in breach of the Data Protection Act after sensitive information was sent to the wrong address. The information was disclosed when eight letters about patients were sent to one of the people affected in July 2013. The letters should have been sent to a GPs surgery. Six of the letters included sensitive medical information relating to the patients treatment. An ICO investigation found that the employee responsible for the mistake hadnt received any form of data protection training. While the health board had introduced mandatory data protection training for all staff in April 2013, by February 2014 only 6.5% of staff had received it. The health board informed the ICO that it did not anticipate prov (English)
