Security threats Toolkit
Story: NHS patient data sold on eBay
This is the government we should trust with our identity data?
This leaves me astonished. First that it should happen. Second that it should be confidential medical records. And third that they have no proper tracking of disposals to be able to see how the hard drive left the hospital.
How can they possibly say 'it could be theft'? Surely they know whether this particular hard drive was stolen or not?
Hard drives have serial numbers. Each drive that leaves any organisation legitimately or by theft should be tracked using that serial number. It's common sense. It's standard business practice. It's clearly not being done by the hospital.
This one was caught by researchers. How many others have not been?
Before rushing headlong into more and more IT projects, perhaps the government should start making sure they and their various public sector bodies can get the basics right.
Full Talkback thread
