I think the nature of this latest enormous Patient Data privacy breach highlights how ridiculous it is for the NHS to not be automatically providing Patients with access to their own records.
Yes it’s terrible that the NHS has spent more than £12 Billion on it’s National Program for IT and there are such basic incompetencies amongst the staff about how to purchase and use technology.
Yes it’s terrible that the NHS with it’s huge IT budgets isn’t doing more to reward hacking experts who can inform them about insecurities and patching needs in the databases that it uses to hold Patient data.
Yes it’s terrible that the NHS has Hospital Trusts ordering £400 Million EHR systems that don’t even know how to deploy and support iPads that they’ve already bought.
But it’s unforgivable in 2017 that the NHS is prioritising things like WiFi in GP waiting rooms while it doesn’t trust Patients to access the electronic healthcare record relating to their care and doesn’t send a SMS notification to Patients (detailing the who/where/why) when this Record is accessed.
I think this is another one of the things we’ll look back on amazed that were so out of touch with the opportunity to help Patients but can you imagine what would happen if the NHS put Oldham GP Dr Amir Hannan (check out the Guardian article he authored in 2011 titled “Patients need access and understanding of their electronic health records”) or Prof Sam Lingam (a Consultant Paediatrician who has been sharing his notes with Parents for 30 years and published the “It’s Your Life” the Pregnancy and Child Health Record publication in 1987 to help Patients take control of their own health information) in charge of it’s IT strategy?
*** UPDATE 29 JANUARY 2018 ***
“One of Norway’s largest healthcare providers,Health South-East RHF (translated), has become the victim of a data breach that may have exposed sensitive data from half the country’s population. This amounts to about 2.5 million people”