Public Health Wales statement on Data breach
Public Health Wales regrets to announce that there has been a data breach involving the personally identifiable data of Welsh residents who have tested positive for COVID-19.
A risk assessment has been conducted and legal advice has been sought, both of which advise that the risk of identification of the individuals affected by this data breach appears low.
The incident, which was the result of individual human error, occurred on the afternoon of 30 August 2020 when the personal data of 18,105 Welsh residents who have tested positive for COVID-19 was uploaded by mistake to a public server where it was searchable by anyone using the site. After being alerted to the breach we removed the data on the morning of 31 August. In the 20 hours it was online it had been viewed 56 times.
In the majority of cases (16,179 people) the information consisted of their initials, date of birth, geographical area and sex meaning that the risk they could be identified is low. However, for 1,926 people living in nursing homes or other enclosed settings such as supported housing, or residents who share the same postcode as these settings, the information also included the name of the setting. The risk of identification for these individuals therefore is higher but is still considered low.
There is no evidence at this stage that the data has been misused. However, we recognise the concern and anxiety this will cause and deeply regret that on this occasion we have failed to protect Welsh residents’ confidential information. Anyone concerned that their data or that of a close family member may have been breached and wanting advice should firstly read the FAQs at www.phw.nhs.wales then email us at PHW.firstname.lastname@example.org if they have any additional questions. People can also call Public Health Wales on 0300 003 0032 to discuss their concerns.
The Information Commissioner's Office and Welsh Government have been informed and we have commissioned an external investigation into the full circumstances surrounding the data breach and any lessons to be learned. The investigation is being led by the Head of Information Governance at the NHS Wales Informatics Service.
In the meantime, we have taken immediate steps to prevent a similar incident from happening again. These include establishing an Incident Management Team to instigate remedial actions which have already resulted in changes to our standard operating procedures so that any data uploads are now undertaken by a senior member of the team. We have also informed our health board and local authority partners and have kept them up to date with the position.
Tracey Cooper, Chief Executive of Public Health Wales recently said,
“We take our obligations to protect people’s data extremely seriously and I am sorry that on this occasion we failed. I would like to reassure the public that we have in place very clear processes and policies on data protection. We have commenced a swift and thorough external investigation into how this specific incident occurred and the lessons to be learned. I would like to reassure our public that we have taken immediate steps to strengthen our procedures and sincerely apologise again for any anxiety this may cause people.”
Latest News from
Public Health Wales urges eligible people in Wales to have free flu vaccine22/09/2020 09:15:00
Public Health Wales is urging all eligible people in Wales to have their free flu vaccine as NHS Wales begins its largest ever national flu vaccine programme.
Rising concerns for communities of Bridgend, Rhondda Cynon Taf and Merthyr Tydfil21/09/2020 14:15:00
Statement given recently (18 September 2020) by Dr Kelechi Nnoaham, Director of Public Health for Cwm Taf Morgannwg University Health Board and Chair of the Incident Management Team (which includes Public Health Wales, Cwm Taf Morgannwg University Health Board, Bridgend, Merthyr and Rhondda Cynon Taff local authorities and South Wales Police).
Survey reveals 91% of Welsh adults support local lockdowns in areas with rising Coronavirus cases21/09/2020 09:15:00
The latest national engagement survey conducted by Public Health Wales has revealed that 91 per cent of Welsh adults support local lockdowns in areas with increasing cases of Coronavirus.
Newport residents urged to be vigilant for Coronavirus symptoms as cases rise16/09/2020 14:15:00
Members of the public in Newport are being advised of the need to be vigilant for the symptoms of Coronavirus, and of the vital need to stick to social distancing guidelines, as a rise in cases there causes concern.
People in Caerphilly urged to social distance properly as clusters of coronavirus give cause for concern07/09/2020 15:43:00
Public Health Wales, Caerphilly County Borough Council and Aneurin Bevan University Health Board are urging people in Caerphilly to remember the vital importance of social distancing, as rising numbers of positive coronavirus (COVID-19) cases causes concern.
Investment will speed up Covid-19 testing and introduce 24/7 labs19/08/2020 14:15:00
Public Health Wales’ laboratory service is to undergo a major transformation which will significantly increase its COVID-19 testing capacity, speed up testing turnaround times and allow regional labs to operate 24 hours a day, seven days a week.
New online NHS course helps people improve their mental health17/08/2020 15:15:15
Feeling worried or anxious can have a big impact on your health, and for some people life at the moment can be particularly difficult.
Survey reveals eight in 10 Welsh adults would want to be vaccinated against Novel Coronavirus (COVID-19) if a vaccine became available05/08/2020 14:15:00
According to the latest national engagement survey conducted by Public Health Wales, 83 per cent of people would want to be vaccinated against Novel Coronavirus (COVID-19) if a vaccine were to become available; 10 per cent would not and seven per cent are unsure.
Transmission in Wrexham community lower than thought, as two new cases identified so far04/08/2020 14:15:00
Just two new cases of Coronavirus have been identified so far at easy-access community testing centres in Wrexham, suggesting that transmission of the virus in the community is lower than previously thought.