‘An NHS clinic in London has been fined £180,000 for a serious breach of the privacy of more than 700 users of an HIV service.
Patients and service users who were on the HIV clinic email list of 56 Dean Street, a Soho-based sexual health clinic, said at the time of the breach they were terrified it could leave them open to blackmail or public outing.
A staff error meant anyone receiving the September newsletter from the service could see the email addresses of all the other recipients.
Addresses had been wrongly entered into the “to” field instead of the “bcc” field, and 730 of the 781 email addresses contained recipients’ full names. Most of the recipients were HIV positive though a small number were not.
Chelsea and Westminster hospital NHS foundation trust, which runs the clinic, has been fined £180,000 after the Information Commissioner’s Office (ICO) found there had been a serious breach of the Data Protection Act, likely to have caused substantial distress.
The information commissioner, Christopher Graham, said it was “clear that this breach caused a great deal of upset to the people affected”.
Graham said the investigation revealed many people recognised other names on the list of recipients, because the clinic served a small area of London, and feared their own name would be recognised too.
The ICO investigation found the trust had previously made a similar error in March 2010, when a member of staff in the pharmacy department sent a questionnaire to 17 patients in relation to their HIV treatment. After the mistake, extra measures were put in place but no specialist training was implemented, the ICO found.
“The trust was quick to apologise for their mistake, and has undertaken substantial remedial work since the breach,” Graham said. “Nevertheless, it is crucial that the senior managers at NHS trusts understand the requirements of data protection law, and the serious consequences that follow when that law is broken.”’
Related Articles:
London HIV clinic fined £180,000 for revealing service users’ names
NHS trust fined for 56 Dean Street HIV status leak- BBC News