Tuesday, 26 August 2008

Laptops theft @ St George's


Many of you will know that St George's suffered a very serious theft of 6 laptops and lost around 20,000 patients data. The full report into that theft has now been written and is currently sitting on the Chief Executive's desk. However, it is not going to be published for another month. We all have to wait until the next Board meeting on September 16th to hear what it says. In addition, the Board have not committed to publishing the report in full - despite the fact that when the Government lost all the Child Benefit records for the whole country they published the full report.

So here is what the report needs to answer:

1. Why are any parts being hidden?
2. Why was the data on the laptops?
3. What work was being done on the laptops?
4. What would have happened if the work had not been done?
5. Why was the data not encrypted?
6. Who authorised the work to be done on laptops?
7. Where the laptops locked up?
8. Do the police believe that the thieves were Hospital staff or not?
9. When was the Information Commissioner informed of the theft?
10. What advice did the Information Commissioner give and was this followed?
11. Has the Information Commissioner seen and approved the final report?
12. Why was an attempt made to blame IT as part of the initial media strategy?
13. Has the Head of IT signed off on the final report?
14. What changes has the Trust made to stop this ever happening again?

No comments: