NHS patient information in data breach by Diagnostic Health

Diagnostic Health, the firm that carries out the majority of ultrasounds for the NHS may have affected up to 10,000 patients for neglecting its responsibilities over data protection laws. Upon investigation by the Information Commissioner’s Office, it was found that the company had stored vital patient data in an unencrypted form, thereby breaching the data protection guidelines from as early as June 2013. Apparently, this lack of respect for patient privacy was further discovered via an online web based storage account where it was found that the same password was used by each staff member to log onto the system.