HK hospital worker mum on patient data loss till 3 days later

A Queen Elizabeth Hospital staffer lost a USB flash drive holding personal data of 92 patients, information of drug prescriptions, and dispensing related documents on Feb 18, but only reported the case to the hospital three days later.

The missing USB flash drive--without encryption and password protection--belongs to a pharmacy department worker, according to the hospital. In the hope of locating the device somewhere inside the department, the worker started searching but effort was in vain.

On Feb 21, the worker reported the loss to the department manager who then notified the hospital management of it. The hospital, once aware of the incident, summoned 100 workers within the department to help in the search and reported the case to the Hospital Authority, the spokesperson noted.

The HA has guidelines on the use of removable electronic storage devices and employees must get approval before using them for work. But the spokesperson doesn't provide details on when a staffer's required to report the loss of a device containing patient data once he/she's aware of it.

"We believe that the USB flash drive is misplaced in the restricted area of the department [of Pharmacy]," the spokesperson noted. "We consider the risk of exposing patient data to the public to be low."

The hospital also reported the case to the Police and the Office of the Privacy Commissioner for Personal Data, in addition to contacting all concerned patients.

The hospital will conduct an in-depth investigation as well as follow-up according to HA's human resources policy, the spokesperson said.

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Follow our new CSO Australia LinkedIn
Follow our new social and we'll keep you in the loop for exclusive events and all things security!
Have an opinion on security? Want to have your articles published on CSO? Please contact CSO Content Manager for our guidelines.

Tags privacydata protectionindustry verticalshealth careQueen Elizabeth Hospital

More about Queen Elizabeth Hospital

Show Comments

Featured Whitepapers

Editor's Recommendations

Brand Page

Stories by Computerworld Hong Kong staff

Latest Videos

More videos

Blog Posts