Almost every organisation with which we come into contact these days is keen to know about us and the way in which we live our lives.<\/p>\n
Banks, retailers and even the National Health Service place a premium on what\u2019s known as \u2018data capture\u2019 \u2013 gathering as much information as they can in order to tailor their goods and services around who we are and what we do.<\/p>\n
Companies know the commercial value of such material. They believe that if they know more about our habits, they stand a better chance of selling us their products.<\/p>\n
The NHS has even outlined plans to issue us with our own unique barcodes to make treatment more specific and reduce the possibility of mistakes being made in how we\u2019re all cared for.<\/p>\n
However, we shouldn\u2019t forget how important data \u2013 our personal details \u2013 are to us too.<\/p>\n
We\u2019ve been reminded of that fact by a series of failures in the way that those details are managed.<\/p>\n
Only a fortnight after millions of subscribers to a website helping individuals conduct illicit affairs found their private information posted on the internet, information about nearly 800 patients of a London sexual health clinic run by the NHS have been circulated in a newsletter.<\/p>\n
An undisclosed number of those people whose names were included in the e-mail circular had tested positive for HIV. The 56 Dean Street clinic in Soho has put the leak down to \u201chuman error\u201d.<\/p>\n
Unsurprisingly, the data breach has caused considerable anger and distress among patients and the authorities with the Health Secretary, Jeremy Hunt, describing it as \u201ccompletely unacceptable\u201d.<\/p>\n
The issue overshadowed another lapse of data security which emerged earlier the same day and featured one of the country\u2019s biggest retail brands. A fault with an online \u201ccontact us\u201d form on the website of WHSmith meant some customers\u2019 details were sent in error to other users.<\/p>\n
Whether health or e-commerce, organisations have a legal responsibility to protect the information relating to those with whom they deal.<\/p>\n
Both of these new matters appear to constitute prima facie cases of data misuse. Where that data comprises very sensitive information, such as that relating to someone\u2019s sexual health, a failure to put rigorous systems in place to safeguard privacy is even more serious.<\/p>\n
The London clinic at the centre of the latest breach has insisted that not all of those patients whose names featured on the e-mail newsletter were HIV positive.<\/p>\n
Even so, those people will doubtless still be dealing with the personal consequences of news reports interpreted as suggesting that everyone on the list may have the condition.<\/p>\n
The Information Commissioner\u2019s Office is already reported to have launched an investigation. It has the power to levy fines of up to \u00a3500,000 for significant data breaches.<\/p>\n
Regardless of such an official inquiry, many of the individuals affected may well be considering whether to take legal action against the NHS under the Data Protection Act or privacy law.\u00a0<\/p>\n
Having handled many claims under the Act and privacy law before, including cases involving the NHS and retail companies, I\u2019m well aware of the complexities of such an action and the responsibilities which those alleged to have breached the legislation have.<\/p>\n
Whilst the director of the 56 Dean Street clinic has been apologetic and pledged to \u201cput things right\u201d, I would not be surprised if a number of his patients feel that only by resorting to law can they reinforce their right to the kind of protection which they are entitled.<\/p>\n","protected":false},"excerpt":{"rendered":"
A recent “human error” that resulted in a serious breach of privacy highlights how important it is for businesses to comply with the Data Protection Act.<\/p>\n","protected":false},"author":42,"featured_media":7975,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","format":"standard","meta":{"_acf_changed":false,"_joinchat":[],"footnotes":""},"categories":[12351],"tags":[11797,9983,11798,11400,11799,11800],"class_list":{"0":"post-4969","1":"articles","2":"type-articles","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-data-protection","8":"tag-data-misuse","9":"tag-data-protection","10":"tag-nhs","11":"tag-privacy-law","12":"tag-sensitive-information","13":"tag-whsmith"},"acf":[],"yoast_head":"\n