NHS trusts face independent data-handling audits
Published: 08 Jul 2008 09:03 BST
NHS trusts are being urged to introduce independent auditors to make sure they are keeping to guidelines for their handling of patient data.
Such a development would mark a shift away from current arrangements that see trusts responsible for carrying out their own 'information governance assurance' self-assessments.
The potential change was revealed by Marlene Winfield, national patient lead for NHS IT body Connecting for Health.
Winfield said the Department of Health had issued guidance to the local strategic health authorities urging them to consider bringing in independent auditors to examine health trusts.
Speaking at a Westminster eForum meeting on information security, Winfield said: "Every trust must carry out an information governance assurance self-assessment."
"The department has asked the strategic health authorities to consider moving to an independent audit from the self-assessments," said Winfield.
Read this
Special report: The top five internal security threats
What should an employer watch out for?
She added that trusts must report any information-assurance issues to their respective board and that any substantial breaches must be published.
Winfield acknowledged it would take time to encrypt all personal data on NHS computers but said trusts were taking intermediate steps to protect data.
She said: "We realise there is going to be a delay before everything is encrypted but we are relying on alternative measures and many more safeguards."
Winfield added that health trusts have suspended unencrypted bulk data transfers and brought in new training and disciplinary procedures for staff as part of a series of measures.
Credit: NHS data handling: Calls for independent audits from silicon.com
- The top five internal security threats
- Keeping mobile data from going walkabout
- Lib Dems call for data guardians
- Worker suspended over loss of prisoner data
- Ministry of Justice reports nine data breaches
- Foreign Office reports five data breaches since 2007
- ICO: Gov't ignoring data-sharing hazards
- Lords presses government for data-breach law
- Video: Get the most out of your data
- Justice minister urges overhaul of gov't data handling
- MoD announces data-protection action plan
- Systemic failure blamed for HMRC data loss
Did you find this article useful?
Digg
Slashdot
Del.ici.ous
Stumble
Reddit
