I am sure you are right.
The information was added to show eg the complexity of the password (with an
underscore) - any fule could have thought up a similar password - but not
the same.
In fact, the whole article was to show the complexity of Choose and Book.
If I had been the patient, I would have gone back to the practice to ask for
help - and then this GP journalist should have been complaining about an
unhelpful practice.
Nick Landau
----- Original Message -----
From: Edwina Withe
To: data-protection+AEA-JISCMAIL.AC.UK
Sent: Friday, January 12, 2007 12:18 PM
Subject: Re: +AFs-data-protection+AF0- Private Eye releasing possible unique patient
information
Processing probably covered by Section 32 - Journalism, literature and art.
E
+AD4APgA+- Simon Howarth +ADw-simon+AEA-INFORMATIONEDGE.CO.UK+AD4- 12/01/2007 11:40 +AD4APgA+-
Do we know that the individual did not want their details published? If so
then I agree with the comments, but I would suspect that if the patient
contact Private Eye, then they have probably been asked for permission
anyway? Just a thought.
I do agree that if the information need not be published then it shouldn't,
but they are journalists after all..
Simon.
From: This list is for those interested in Data Protection issues
+AFs-mailto:data-protection+AEA-JISCMAIL.AC.UK+AF0- On Behalf Of Nick Landau
Sent: 11 January 2007 13:12
To: data-protection+AEA-JISCMAIL.AC.UK
Subject: +AFs-data-protection+AF0- Private Eye releasing possible unique patient
information
In the current Private Eye, MD (the medical column) was reporting on the
problems as he saw it of patients using the NHS Choose and Book. He provides
the example of a particular patient and gives the patient's name (who
contacted Private Eye), the booking reference number and password.
According to
http://www.gloshealthservices.org.uk/chooseandbook/cab/about.htm
+ACI-How does Choose and Book work?
If your GP decides that you need to see a specialist, he/she will print out
an 'Appointment Request' form, which includes your Unique Booking Reference
Number and lists the hospitals or local services available to you.
You will be able to choose from this list and book an appointment by calling
your chosen hospital or local service. You can call straight away after
seeing your GP or at anytime up to two weeks later, if you want to think
more about your choice or preferred appointment date and time.
Your password and reference number
A password will be printed out on a separate sheet of paper and given to you
with your Appointment Request. This will be used to make sure your
information is kept secure on the computer system. When you call your chosen
hospital they will identify you by your password and the reference number on
your Appointment Request form.+ACI-
Well, the problem could clearly have been described without giving away this
patient personal information.
MD is a GP and therefore should have known this. It seems that he is more
concerned with making political points than respecting the person's
confidentiality. Obviously the patient supplied him with the information,
but he/the paper should have acted in the informant's interests by not
publishing it.
Nice one, Private Eye+ACE- You can imagine what they would say about another
paper that did this - I think it would be in +ACI-Streets of Shame+ACI-.
Nick Landau
All archives of messages are stored permanently and are available to the
world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
Selected commands (the command has been filled in below in the body of the
email if you are receiving emails in HTML format):
Leaving this list: send leave data-protection to listserv+AEA-JISCMail.ac.uk
Suspending emails from all JISCMail lists: send SET +ACo- NOMAIL to
listserv+AEA-JISCMail.ac.uk
To receive emails from this list in text format: send SET data-protection
NOHTML to listserv+AEA-JISCMail.ac.uk
To receive emails from this list in HTML format: send SET data-protection
HTML to listserv+AEA-JISCMail.ac.uk
All user commands can be found at
http://www.jiscmail.ac.uk/help/commandref.htm and are sent in the body of an
otherwise blank email to listserv+AEA-JISCMAIL.ac.uk
Any queries about sending or receiving messages please send to the list
owner data-protection-request+AEA-JISCMail.ac.uk
(Please send all commands to listserv+AEA-JISCMail.ac.uk not the list or the
moderators, and all requests for technical help to helpline+AEA-JISCMail.ac.uk,
the general office helpline)
All archives of messages are stored permanently and are available to the
world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
Selected commands (the command has been filled in below in the body of the
email if you are receiving emails in HTML format):
Leaving this list: send leave data-protection to listserv+AEA-JISCMail.ac.uk
Suspending emails from all JISCMail lists: send SET +ACo- NOMAIL to
listserv+AEA-JISCMail.ac.uk
To receive emails from this list in text format: send SET data-protection
NOHTML to listserv+AEA-JISCMail.ac.uk
To receive emails from this list in HTML format: send SET data-protection
HTML to listserv+AEA-JISCMail.ac.uk
All user commands can be found at
http://www.jiscmail.ac.uk/help/commandref.htm and are sent in the body of an
otherwise blank email to listserv+AEA-JISCMAIL.ac.uk
Any queries about sending or receiving messages please send to the list
owner data-protection-request+AEA-JISCMail.ac.uk
(Please send all commands to listserv+AEA-JISCMail.ac.uk not the list or the
moderators, and all requests for technical help to helpline+AEA-JISCMail.ac.uk,
the general office helpline)
+ACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACo-
This e-mail may be read by employees of the Council and is therefore not to
be considered private by the recipient. The views expressed in this e-mail
are those of the individual and not necessarily the views or opinions of
Bracknell Forest Borough Council.
This e-mail and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to which they are addressed.
If you have received this e-mail in error please notify the system manager.
Email: mail.administrator+AEA-bracknell-forest.gov.uk
This footnote also confirms that this e-mail has been swept by MIMEsweeper
for the presence of computer viruses. Although the Council has taken steps
to ensure that this e-mail and any attachments are virus free we advise that
in keeping with good ICT practice the recipients should confirm this for
themselves.
+ACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACoAKgAqACo-
All archives of messages are stored permanently and are available to the
world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
Selected commands (the command has been filled in below in the body of the
email if you are receiving emails in HTML format):
Leaving this list: send leave data-protection to listserv+AEA-JISCMail.ac.uk
Suspending emails from all JISCMail lists: send SET +ACo- NOMAIL to
listserv+AEA-JISCMail.ac.uk
To receive emails from this list in text format: send SET data-protection
NOHTML to listserv+AEA-JISCMail.ac.uk
To receive emails from this list in HTML format: send SET data-protection
HTML to listserv+AEA-JISCMail.ac.uk
All user commands can be found at
http://www.jiscmail.ac.uk/help/commandref.htm and are sent in the body of an
otherwise blank email to listserv+AEA-JISCMAIL.ac.uk
Any queries about sending or receiving messages please send to the list
owner data-protection-request+AEA-JISCMail.ac.uk
(Please send all commands to listserv+AEA-JISCMail.ac.uk not the list or the
moderators, and all requests for technical help to helpline+AEA-JISCMail.ac.uk,
the general office helpline)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
