EXCLUSIVE: NHS Tayside records more than 1,200 data breaches in five years
The full number follows a series of high profile leaks which angered patients and staff.
Former patient Alan Ogilvie, who obtained the new figures through Freedom of Information (FOI) requests, said it is 'one symptom of a deeper failure'.
He said: 'The lack of accountability utterly erodes any shred of trust patients could have.
'How can patients ever trust NHS Tayside with their most sensitive information?'
Mr Ogilvie was among 132 victims of disgraced ex-Dundee doctor Sam Eljamel who received an apology in January after their personal details were leaked.
Last year, The Courier detailed seven separate data breaches which spanned a two-year period.
In August 2023, a Microsoft Excel spreadsheet containing sensitive information about NHS Tayside staff was shared in error with another team.
Just weeks later paperwork for hundreds of patients were missing.
Perthshire woman Amanda Flood has now been victim to three data breaches.
On two occasions a health board employee snooped on her personal files, while last October she received a letter saying her details had mistakenly been sent to a patient.
In February 2024, NHS workers lost documents with personal details about primary-one pupils in Broughty Ferry.
And in December last year Tayside chiefs launched an internal review after the data of 125 patients was released by mistake.
The new details show 381 errors were flagged internally in 2023-24, by far the highest total across an eight-year period.
There were 272 breaches in 2022-23, after 246 were logged in 2021-22.
Between 2019 and 2024, 33 of these were deemed serious enough to be sent on to Scotland's Information Commissioner.
The figures also show 13% of staff currently working at the heart board are yet to complete mandatory training for handling data.
Meanwhile, NHS Tayside said 14,165 staff were up to date with data courses as of March this year – which leaves 1,800 staff lagging behind.
In June 2019, 69% of staff were compliant with the compulsory data training.
NHS Tayside notes new data protection laws – GDPR – came into force in May 2018, and says this 'will have impacted on the reporting and compliance figures'.
Mr Ogilvie's Freedom of Information request found the total number of data breaches since 2016.
The Eljamel patient previously won a complaint against NHS Tayside after waiting more than four months when he asked for the health board to hand over his personal data.
'It's frankly astonishing that a former patient like myself has had to make formal complaints and conduct a detailed FOI investigation,' he said.
'This is a stark revelation of systemic ignorance and a profound failure of governance.'
An NHS Tayside spokesperson said information security is taken very seriously.
'All staff are required to undertake mandatory training in safe information handling and NHS Tayside has a suite of information governance policies for staff to follow, including a data protection policy,' the spokesperson said.
'Currently the majority, 87%, of NHS Tayside staff have completed the safe information handling training.
'All NHS Tayside staff are actively encouraged to report data breaches, no matter how small, through the Datix incident reporting system.
'All breaches of data protection are recorded and investigated within NHS Tayside and, where appropriate, are reported to the Information Commissioner's Office.
'A learning review is ongoing to evaluate systems and processes currently in place and identify actions to further improve data security across NHS Tayside.'
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The National
34 minutes ago
- The National
Ian Murray's Laffer curve comments point to ignorance of economics
The Laffer Curve epitomises economists' quest for mathematical and scientific rigour and respect. A lot of economic data is collected and presented in the form of graphs from which relationships between variables may be deduced, but often without proper statistical evaluation of the accuracy or significance of the results. But at least there is data on which the calculations and predictions can be based, however unreliable. READ MORE: Meeting details between Ian Murray and Unionist think tank revealed The Laffer Curve purports to plot tax revenue against rate of taxation. It has only two points, one at either end of the baseline (or x-axis). Arthur Laffer postulated that there would be a line between these extremes, but the shape of it is entirely hypothetical. No data has ever been gathered to establish where intermediate points might lie, because to do so would be highly disruptive of the fiscal management of a country's economy. So the Laffer Curve is a figment of the imagination. Ian Murray's quoting of it is a worrying indication of a lack of knowledge or understanding of key economic concepts. Julian Smith Limekilns ANENT my recent observations on our failing NHS (Letters, Aug 9), it pains me to point out further inadequacies. In my previous letter I highlighted a case of a friend where a tissue biopsy was taken during an invasive procedure on January 24 but she still hadn't been informed as to whether the pathology was good or bad news. After great effort and much time spent telephoning hard-to-contact NHS admin staff, she discovered that a pathology report was created on the April 17 yet the correspondence to her on the subject was only generated very recently and was in the post. So my friend is still waiting, six months post-op, to discover whether she has a significant, possibly life-threatening, condition while the tissue sample and the result spent time sitting waiting to be attended to. In the same vein, another friend who is undergoing chemotherapy for a malignancy had a CT scan three weeks ago to monitor progress but has had her review appointment this week rescheduled because the CT scan has yet to be scrutinised by a specialist radiologist. In an ideal world, the CT could be reported on in real time, but for financial reasons everything is on hold – including the patient's state of mind for weeks until the scan is checked by a radiologist who wasn't present when the CT was taken but who could actually be based in Australia doing part-time NHS work. As I stated previously, I support the NHS wholeheartedly but it is underfunded, understaffed and stretching to provide a service to a standard it simply cannot achieve. When things are overstretched they break, and that is what is about to happen with our NHS if the basic problems are not dealt with. We deserve and pay for a first-class NHS but we don't get it. David J Crawford Glasgow CLARE Haughey's excellent but chilling account of the very real peril of creeping privatisation of our NHS (Aug 11) ought to make us all sit up and pay attention. Nothing can be comfortably assumed to be safe. And, on the watch of a soi-disant Labour government? How this ought to sicken us all, the more so when you remember that it was Attlee's post-war Labour administration that brought the NHS into being in the first place. And this precisely because preceding private healthcare simply did not serve people at all. READ MORE: Clare Haughey: If Labour win power in Scotland, what will they do to our NHS? Clare names and hopefully shames the beneficiaries of these obscene donations. This is indeed courageous. Good on you, Clare. I am reminded of two apposite things. Firstly, an acquaintance of mine recently spent some weeks in the USA. He suffered a fall, being knocked down by a cyclist. This required required a hospital visit to outpatients, and 11 stitches to a finger. Relatively minor, you might say, although, of course, unpleasant. For this he received a bill of $650, with a further $60 to be paid for post-treatment care. Luckily for him, his holiday insurance met most, if not all, of this. Secondly, those with a longer memory may recall studies undertaken by the World Health Organisation on at least two occasions that I recall, where the quality of healthcare received was compared over 39 countries. READ MORE: Three new cancer drugs approved for use by NHS Scotland On both occasions, the country offering the best care was France, and number 39 out of 39 was ... yes, you guessed correctly, USA. The UK came in at around half way, at 19. This being the case, why on earth would we wish to emulate a profit-driven broken system which serves none but the insurance companies and their bloated shareholders? Brian York Dumfries
Daily Mail
an hour ago
- Daily Mail
Pensioner, 77, died during heart surgery when hospital suffered a ten-minute power cut during a crucial stage, inquest hears
A pensioner died during heart surgery at an NHS hospital after the operating theatre she was in suffered a ten-minute-long power cut, an inquest heard. Jean Dye, 77, was at the crucial stage of the procedure when the electricity went down - meaning doctors had to delay the process as they couldn't see vital X rays. Five years after her death, a coroner has now issued a report saying that the delay in restoring power was a 'critical factor in her death'. It was found that an engineer was required to reset the system because it was in another part of the hospital. In a Prevention of Future Deaths Report, Paul Smith, Senior Coroner for Greater Lincolnshire, has now raised concerns about the lack of power controls within the operating theatre and that medical professionals weren't trained in how to understand when electricity has been restored. Mrs Dye, from Grimsby, Lincolnshire, suffered an underlying cardiac disease and attended Scunthorpe General Hospital to have it treated, the inquest was told. At the time of her death in September, 2020, she was having stents implanted to treat narrowed blood vessels. The operation only has a limited window to deploy the devices, the hearing was told. However, at exactly this moment there was a 'sudden and unexpected' power cut, which lasted for 10 minutes. It meant that medics could not see X-rays they needed for the procedure. No clear cause for the power cut has been identified, other than it overrode the back-up electrical supply, Mr Smith said. It was confirmed that power cuts have occasionally happened at hospitals across the country but the staff in Scunthorpe had not had this happen before. There was no manual re-activation of the circuit meaning that an engineer had to come to fix the issue. Once the power had returned, the stenting was completed but Mrs Dye failed to recover and she later passed away, the inquest heard. The hearing concluded that 'on the balance of probabilities, Mrs Dye would have survived but for the loss of electrical power'. It gave her cause of death as an iatrogenic artery dissection during a percutaneous coronary intervention. Mr Smith raised concerns about the lack of an indicator within the lab to confirm that the power had re-activated. There were also issues with the reset button being elsewhere in the hospital. Mr Smith said: 'The delay whilst power was restored was a critical factor in this death. 'The loss of power arose as a result of the Emergency Power Off (EPO) circuit activating. It overrode the emergency power back up system. 'All staff at the scene were unaware of the cause of the loss of power, never having experienced such a situation previously, and an engineer was summoned to attend to reinstate the power, which he did. 'There was no light or other indicator within the lab to confirm to those present that the EPO circuit had activated. Likewise there was no restart button within the lab to permit the EPO circuit to be reset. That lay within the plant room elsewhere within the hospital. 'Had staff been aware of the exact cause of the loss of power on this occasion and had they had the opportunity to reset the circuit without the need to await the arrival of an engineer, who in turn had to attend a separate plant room, the downtime would likely have been significantly reduced. 'Whilst it was not possible to say that the additional time spent on this occasion made a difference between the patient surviving or not, there may well be future cases within which such fine margins are time critical. 'I received evidence that there is no current guidance in relation to the siting of such controls remote from the affected room. I invite review of that guidance and of the need for any consequential training.' Mr Smith sent the report to NHS England and the Health Service Executive, who have until August 28 to respond.
BBC News
an hour ago
- BBC News
Tributes as former Birmingham doctor dies aged 95
Tributes have been paid to a "trailblazer" former doctor who has died at the age of Pauline Manfield became one of the first female consultants in UK paediatrics, helping establish a department at the Good Hope Hospital in Sutton Coldfield, with her colleague, staff nurse Eileen leaving the NHS in her 60s, devout Christian Dr Manfield became a lay reader and chaplain at Birmingham Cathedral where she served until she reached her late Hospitals NHS Foundation Trust said she "leaves behind a legacy defined by compassion, dedication, and an unwavering commitment to service". Dr Manfield was born in Worcester in 1929 and her early years were shaped by World War Two, especially the vivid memories of bombings during her time in Preston as a family eventually settled in Chelmsford where she attended Chelmsford Girls' High an aspiration to become a doctor, she studied medicine at The Royal Free Hospital. She then went on to earn membership of the Royal College of Physicians in the 1960s before joining Good addition to her work with the NHS and Birmingham Cathedral, she was a member of Sutton Sisters, a local multi-faith group promoting understanding and unity. She was involved with a range of local groups, such as the Sutton Coldfield Archaeological and Gardening Societies, and the Lichfield Science and Engineering also ran in the Sutton Coldfield Fun Run, enjoyed photography and travel, and was a regular at ballet shows and Birmingham Symphony Orchestra Manfield also led efforts through the Sutton Coldfield Association of Women Graduates to sponsor young women in Malawi. 'Deep compassion' "Her intelligence and warmth earned her early praise as 'clever, pretty and kind' – a description that would remain true throughout her long life," a spokesperson for the NHS Trust said."Pauline was known not only for her clinical excellence but also for the deep compassion she showed to patients and their families."Her impact was so significant that many former patients contributed to a special birthday book in her honour, filled with notes of gratitude and stories of lives touched by her care."While she never married or had children, the spokesperson said "Pauline nurtured deep friendships and maintained connections with her schoolmates and colleagues"."She was godmother to 12 children, and her home in Sutton Coldfield was a hub of hospitality, known for its garden parties, home-cooked meals, and walls lined with decades of photographs," the spokesperson continued."Pauline will be remembered as a trailblazer, a mentor, and a kind-hearted physician who gave her all to the people and causes she believed in." Follow BBC Birmingham on BBC Sounds, Facebook, X and Instagram.
