Data-loss blunders are a real threat for private practice

How much security does your password proivde?

Part one of two: Security breaching mistakes

The most valuable thing on your private practice computers or network is the data you store there. After all, that information is the reason for having the computer and network in the first instance. Software applications and operating systems can always be reinstalled, but user-created records are unique and, if lost, may be irreplaceable. This is the first of two posts that will assess the data loss risks to your system - including those posed by staff blunders. 

In recent years we seem to have witnessed an increase in the number of news stories about laptops containing sensitive patient data which have gone missing. The same is true of files containing medical details, which have been lost or forgotten on public transport.

In 2010, computers containing the names, addresses and medical notes of 2,500 Camden Primary Care Trust patients were left beside a skip at St Pancreas hospital in London. The PCs, which were not encrypted, were stolen and never recovered.

In January 2009, a health worker in Lancashire lost a memory stick containing the medical details of more than 6,000 prisoners and ex-prisoners from HMP Preston, a category B local prison. The data was encrypted, but the password had been written on a note which was attached to the stick when it was misplaced.

Later that year, a report from the Information Commissioner told the NHS to improve its data security, after the watchdog took action against 14 NHS organisations in six months prior.

In addition to these security issues, attacks on computer networks from the Internet have dramatically increased in sophistication and frequency. These attacks are affecting all types of networks, from home users up to large corporations. Viruses, junk email, spyware and other security risks are now commonplace and a security breach can paralyze an entire practice in a matter of minutes.

New viruses compromise passwords and pass confidential data to unscrupulous third parties.

Not only are external risks like those mentioned above expensive to correct, but the damage to patient confidence and the risk to operations from an internal threat, such as a disgruntled employee stealing data, can cripple an organisation.

However, you can at least make it difficult for them. I believe that if you stick to these steps you can minimise the problems the NHS have encountered.  If you have any questions, please call me on 01992 655940. Furthermore, readers of our blog can obtain a free trial of ‘PPM’ – Private Practice Manager by quoting ‘Blog Offer’ when you call. 

Subscribe to receive our Blog via e-mail