Orkney Constituency MSP Liam McArthur, LibDem, has called the latest failure of NHS Orkney’s data protection as “a serious breach of trust and confidence.”
Confidential medical records in Stronsay had been accessed by a member of staff, now no longer employed by NHS Orkney. The breach came to light after a complaint raised by a member of the public.
Liam McArthur Continued:
” NHS Orkney holds some of the most sensitive personal data and it is essential that it has robust systems in place to protect that information and ensure it isn’t shared inappropriately.
“Stronsay residents will be rightly alarmed by what has happened and wondering how it has been possible. They deserve answers as well as reassurances about the steps that will be taken to avoid any possible repeat.
“Given the scale of the data breach in a community of this size, and earlier issues relating to the Stronsay practice, I would hope that the investigation into these events will be treated as a priority by the Information Commissioner.
“Meantime, I welcome the initial steps taken by NHS Orkney to provide support to those who will be concerned and seeking answers. I would encourage any constituents worried to contact NHS Orkney’s Data Protection Officer directly or get in touch with my constituency office.”
NHS Orkney has obligations under the Data Protection Act (2018) (DPA) as we need to collect and use a variety of sensitive and personal information about people in order to operate.
We use patient and carer data to support provision of care, administration of healthcare services, teaching and research. We rely upon personal information about employees, suppliers, and others we communicate with.
All such personal information must be dealt with properly and securely no matter how it is collected, recorded and used – whether on paper, in a computer system or recorded on other material.
The Data Protection Officer for NHS Orkney is Gordon Robinson. You can write to Mr Robinson at The Balfour, Foreland Road, Kirkwall, KW15 1NZ, telephone him on 01856 888 253 or send an email to ork.dp@nhs.scot
NHS Orkney

Categories: Local News
We had similar happen by staff at OIC. They failed to report themselves to the ICO as they were trying to cover for the individuals involved. We reported them a year later and the ICO confirmed the breach.