NHS Forth Valley maternity service data breach impacts 150 women

NHS Forth Valley has launched an internal investigation after a non-clinical employee transferred a spreadsheet containing sensitive maternity service data to their personal email address. The breach affected approximately 150 women who had been in contact with maternity services at Forth Valley Royal Hospital. The personal data within the spreadsheet varied by individual but included full names, dates of birth, addresses, postcodes, NHS numbers, and maternity care treatments.

The health board has contacted the affected women, some of whom expressed significant concern about patient confidentiality. While the employee claimed the data was taken for analytical purposes and has since been deleted, officials cannot confirm that no other copies exist. The incident has been reported to the Information Commissioner's Office (ICO) and Police Scotland.

Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.