Darling is to make an announcement at 3.30 - bit of a problem?

[BoredBloke]

"Has anybody ascertained why the Audit office need all those details"

They didn't. They asked for 7 records and for them to be anonymous. It's just some clown sent them the lot.

[TheFaQQer]

Watching Newsnight last night, it appeared that they have also branded the disks with Darling's face.

You'd have thought that they would have chosen something more discreet, really.

[Troll]

"Has anybody ascertained why the Audit office need all those details"

They didn't. They asked for 7 records and for them to be anonymous. It's just some clown sent them the lot.

and the really worrying thing is how can low level clowns have access to that amount of sensitive data

[DimPrawn]

Oh Dear ™

and the really worrying thing is how can low level clowns have access to that amount of sensitive data

http://www.e-health-insider.com/news...d_by_nhs_staff

20 Sep 2007

Reports that the records of a celebrity were illicitly viewed by over 50 members of staff at an NHS hospital look set to further fan fears about the confidentiality of patient records in the NHS Care Records Service now under development.

Ironically, the incident was cited in board papers for North Tees Primary Care Trust only as an illustration of why it was necessary to tighten procedures for staff to access sensitive personal medical records.

The March board paper said: "It was noted in an audit that a recent admission of a celebrity to a hospital had revealed over 50 staff viewing the patient record."

The PCT was unable to name the celebrity and says that the incident did not occur in any of its hospitals. It was also unable to identify where or when the incident had occurred or the source its board paper had reported it from. “This incident is unrelated to North Tees PCT and occurred in an unknown trust,” said a spokesperson.

E-Health Insider has been unable to identify the original source of the reported incident. This makes it impossible to know whether it occurred on a system supplied under the £12.4bn NHS IT programme. Connecting for Health (CfH), the agency responsible for the IT programme, told EHI it was unaware of the incident.

[lilelvis2000]

Doesn't need connectivity.

It must write out files to a disk.

Takes said files from disk and send over SSL secured link to a disk at the other end.

How's is that different from posting a disk? (Except it actually gets there and no-one can steal it).

Unfortunately, a human must be involved. And if the link is down or the human is lazy or stupid - they will burn the data to disk and send it through the post.

As I saw on Newsnight clearly the department has a policy but does not enforce it, even after gaff after gaff. Apparently there have been several dozen laptops stolen from HMRC this year - probably with unencrypted data on them.

[threaded]

No need to panic...

No need to panic, they didn't lose them.

They were stolen to order.

[BoredBloke]

That was one of the things they touched on last night on Newsnight. This data would be worth a fortune to many people.

[wendigo100]

Apparently there have been several dozen laptops stolen from HMRC this year - probably with unencrypted data on them.

Over 4000 civil servant staff take their work home with them on laptops. 41 of those laptops were stolen this year, and who is to say how many of the others have been compromised?

Since it appears to only need a single compromise to open the gates of hell, perhaps the public services need to review their policy of home working.

[DimPrawn]

Over 4000 civil servant staff take their work home with them on laptops. 41 of those laptops were stolen this year, and who is to say how many of the others have been compromised?

Since it appears to only need a single compromise to open the gates of hell, perhaps the public services need to review their policy of home working.

Use Citrix or similar to present the OS at home on a laptop or desktop.

That way, steal the laptop and all the data is safely on the Citrix server.

[TheFaQQer]

Use Citrix or similar to present the OS at home on a laptop or desktop.

That way, steal the laptop and all the data is safely on the Citrix server.

That's what they do here.