Public Health Wales statement on Data breach
Public Health Wales regrets to announce that there has been a data breach involving the personally identifiable data of Welsh residents who have tested positive for COVID-19.
A risk assessment has been conducted and legal advice has been sought, both of which advise that the risk of identification of the individuals affected by this data breach appears low.
The incident, which was the result of individual human error, occurred on the afternoon of 30 August 2020 when the personal data of 18,105 Welsh residents who have tested positive for COVID-19 was uploaded by mistake to a public server where it was searchable by anyone using the site. After being alerted to the breach we removed the data on the morning of 31 August. In the 20 hours it was online it had been viewed 56 times.
In the majority of cases (16,179 people) the information consisted of their initials, date of birth, geographical area and sex meaning that the risk they could be identified is low. However, for 1,926 people living in nursing homes or other enclosed settings such as supported housing, or residents who share the same postcode as these settings, the information also included the name of the setting. The risk of identification for these individuals therefore is higher but is still considered low.
There is no evidence at this stage that the data has been misused. However, we recognise the concern and anxiety this will cause and deeply regret that on this occasion we have failed to protect Welsh residents’ confidential information. Anyone concerned that their data or that of a close family member may have been breached and wanting advice should firstly read the FAQs at www.phw.nhs.wales then email us at PHW.email@example.com if they have any additional questions. People can also call Public Health Wales on 0300 003 0032 to discuss their concerns.
The Information Commissioner's Office and Welsh Government have been informed and we have commissioned an external investigation into the full circumstances surrounding the data breach and any lessons to be learned. The investigation is being led by the Head of Information Governance at the NHS Wales Informatics Service.
In the meantime, we have taken immediate steps to prevent a similar incident from happening again. These include establishing an Incident Management Team to instigate remedial actions which have already resulted in changes to our standard operating procedures so that any data uploads are now undertaken by a senior member of the team. We have also informed our health board and local authority partners and have kept them up to date with the position.
Tracey Cooper, Chief Executive of Public Health Wales recently said,
“We take our obligations to protect people’s data extremely seriously and I am sorry that on this occasion we failed. I would like to reassure the public that we have in place very clear processes and policies on data protection. We have commenced a swift and thorough external investigation into how this specific incident occurred and the lessons to be learned. I would like to reassure our public that we have taken immediate steps to strengthen our procedures and sincerely apologise again for any anxiety this may cause people.”
Latest News from
Pandemic highlights need for long term strategies to ensure safe, secure housing for all30/11/2021 09:15:00
A new Health Impact Assessment conducted by Public Health Wales highlights how the Coronavirus pandemic has demonstrated that having a safe, secure home is essential for our health, wellbeing and equity, and what needs to be done to ensure that this is the reality for most people.
Paid employment and education associated with unpaid carers' wellbeing25/11/2021 13:43:00
On Carers Rights Day (25 November 2021), new research by Public Health Wales’ Research and Evaluation Division and Swansea University, has found that unpaid carers have markedly poorer health than the general population in Wales; but that being in paid, secure employment and/or education whilst caring for others is associated with higher wellbeing amongst unpaid carers.
Primary and Community Care have important role in obesity prevention and weight management11/11/2021 14:15:00
Two new reports published yesterday by Public Health Wales’ Primary Care Division highlight how primary and community care can support obesity prevention and weight management in Wales, and the support that the workforce needs to fulfil this important role.
What Adverse Childhood Experiences are costing European economies10/11/2021 09:15:00
Deficits in child and family support created by COVID-19 must be urgently addressed.
Global Citizenship: launch of the new NHS e-learning module08/11/2021 16:15:00
The International Health Co-ordinating Centre (IHCC), WHO Collaborating Centre on ‘Investment for Health and wellbeing’, Public Health Wales has announced the launch of the first Global Citizenship e-learning resource for the NHS.
Death with TB in Lampeter08/11/2021 12:33:00
Public Health Wales has been notified of the death with Tuberculosis (TB) of a student at the Lampeter campus of University of Wales Trinity St David.
Now is the time to tackle inequalities in Wales and build a better future for all says new report05/11/2021 16:15:00
Public Health Wales has joined forces with the Future Generations Commissioner for Wales to look at what challenges and opportunities the future may hold for creating a more equal Wales.
More than 100,000 Coronavirus samples genomically sequenced by Welsh Pathogen Genomics Unit04/11/2021 12:33:00
The world-leading Pathogen Genomics Unit (PenGU) at Public Health Wales has now genomically sequenced more than 100,000 COVID-19 samples.
New resource highlights health impacts of climate change02/11/2021 14:15:00
Public Health Wales has published a series of infographics highlighting the importance of climate change impact on the health and wellbeing of the population of Wales, and to support public bodies and businesses to take action to address any impacts.