According to statistics from the Information Commissioner's Office (ICO), the UK National Health Service has reported 305 data security breaches since November 2007. During the same period, the private sector reported 288 breaches, local government reported 132 breaches, and central government reported 81 breaches. The most frequent cause of NHS breaches was hardware theft, which accounted for 116 incidents, followed by hardware loss, which accounted for 87 incidents. There were also 43 instances in which NHS information was disclosed improperly, 17 instances in which data were lost in transit, and 13 instances of improper technology disposal. In all, more than 1,000 data breaches have been reported to the ICO. In April the ICO was granted the authority to impose fines of up to GBP 500,000 (US $730,000) for serious data breaches.
- http://www.kable.co.uk/nhs-data-losses-information-commissioners-office-01jun10
- http://www.zdnet.co.uk/news/compliance/2010/06/01/nhs-top-culprit-as-uk-data-breaches-exceed-1000-40089098/
- http://www.ico.gov.uk/upload/documents/pressreleases/2010/1000_data_breaches280510.pdf
- http://www.ico.gov.uk/upload/documents/library/corporate/research_and_reports/breach_notification_spreadsheet_may2010.pdf
Discussions of Interoperability Exchange, Privacy, and Security in Healthcare by John Moehrke - CyberPrivacy. Topics: Health Information Exchange, Document Exchange XDS/XCA/MHD, mHealth, Meaningful Use, Direct, Patient Identity, Provider Directories, FHIR, Consent, Access Control, Audit Control, Accounting of Disclosures, Identity, Authorization, Authentication, Encryption, Digital Signatures, Transport/Media Security, De-Identification, Pseudonymization, Anonymization, and Blockchain.
Pages
▼
Sunday, June 6, 2010
A Look into the UK breach statistics
This data looks very much like the USA data published by HHS outlined in A Look into the HHS Posts Data Breach Notifications. The biggest issues in both cases are hardware theft.
Great article highlighting the need for everyone to have a much higher computer/data security awareness. Check a (free) blog, "The Business-Technology Weave" (can Google to it) - it reflects what this article is saying. The majority of breaches are due to human error, therefore awareness and common sense are key, in supporting all necessary best practices. The blog author also has a book we use at work, "I.T. WARS" (you can Google that too). It has a great Security chapter, and others that treat security. Highly recommended. Great stuff.
ReplyDelete