NHS chief execs may be accountable for data loss

  • 28 April 2008

The Information Commissioner has backed proposals by cabinet secretary, Sir Gus O’Donnell to hold senior Whitehall figures and NHS chief executives personally responsible if their department or trust loses or mishandles personal information.

Speaking at the Infosecurity Europe conference in London last Tuesday, Information Commissioner Richard Thomas said he has seen a draft of O’Donnell’s report and backed its proposal to make senior civil servants responsible for all issues relating to issues of accountability and information governance.

He said: “It has to be the likes of chief executives of NHS trusts and permanent secretaries who are held accountable when things go wrong.

They can’t simply make assumptions that everything is in the hands of the techies.” Richard Thomas

Sir O’Donnell is expected to release his report on data security to parliament next month, which was commissioned by the Prime Minister in the wake of the loss of 25m child benefit claimant records by the HMRC last November.

Thomas said the public was rightly concerned by details being passed to other organisations, or information not being stored securely. Later this year, his office will be beginning its new ‘spot check’ policy.

"There are going to be new requirements for Whitehall departments and new guidance for the public sector at large," Thomas said.

"It’s not just about data security. We need to ask a whole range of questions, such as why so much information is being collected. Why is it being retained for so long? Why are laptops which hold the information not being encrypted? And why are such laptops being left in the backs of cars?"

EHI Primary Care revealed last week that the NHS has reported more than ten data security breaches to the Information Commissioner in the six months since the loss of 25m child benefit records.

An ASSIST and UKCHIP spokesperson told EHI: “David Nicholson has already stressed that chief executives should take personal responsibility for information and I wouldn’t think that any NHS organisation would think otherwise.

“Information security and governance have struggled to get recognition by the top boards, so this move could only improve things. Chief executives already have responsibility for clinical governance, there is no reason to them to think about information governance in a different light.”

Subscribe to our newsletter

Subscribe To Our Newsletter

Subscribe To Our Newsletter

Sign up

Related News

Ground robots to join London’s NHS drone network

Ground robots to join London’s NHS drone network

Autonomous ground delivery robots are planned to join the drone delivery network in London to deliver NHS supplies.
C2-Ai and Netcall announce data partnership

C2-Ai and Netcall announce data partnership

A tech partnership could help NHS, local government, and housing organisations collaborate to understand the needs of people in their care.  
Pitchfest finalist Little Journey launches app at Walsall hospital

Pitchfest finalist Little Journey launches app at Walsall hospital

An app from Pitchfest finalist, Little Journey has gone live at Walsall Manor Hospital to help young patients prepare for hospital stays.