{"id":3605,"date":"2019-03-01T07:30:57","date_gmt":"2019-03-01T07:30:57","guid":{"rendered":"https:\/\/www.dataleaklawyers.co.uk\/blog\/?p=3605"},"modified":"2019-02-28T21:52:33","modified_gmt":"2019-02-28T21:52:33","slug":"u-turn-in-worcester-gp-data-breach-case","status":"publish","type":"post","link":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case","title":{"rendered":"U-turn in Worcester GP data breach case"},"content":{"rendered":"

NHS England has ruled in an investigation into a Worcester GP data breach after previous findings suggested that the law had not been broken.<\/p>\n

In this unusual case, the Severn Valley Medical Practice reportedly posted information online about a patient. Initially, the Practice is understood to have disputed that any data protection breach had occurred. Since then, NHS England and the Information Commissioner\u2019s Office (ICO) both agree that the incident was a failure to comply with data protection obligations.<\/p>\n

Another element that makes this case unusual is about allegations made surrounding the Data Protection Officer (DPO) who reportedly claimed there wasn\u2019t a breach in the first place.<\/p>\n

<\/p>\n

Why this Worcester GP data breach is important to look at<\/strong><\/h3>\n

We believe that this particular Worcester GP data breach case is an important one to look at. We have what appears to be an attempt by a DPO to dispute that a breach has taken place as part of internal investigations. It has then taken NHS England and the ICO to affirm that the posting of patient information online was a breach.<\/p>\n

On the face of it, any posting of patient information online can easily be a\u00a0 medical data protection breach<\/strong><\/a>. The issue as to alleged false claims made by the DPO is an additional concern. We ought to be able to trust that a DPO will have the best interests of a data subject at heart. In this case, it appears to look like the incident that stemmed from a Freedom of Information request was being brushed aside.<\/p>\n

It\u2019s understood that the DPO has reportedly may have inflated claims about his legal experience and qualifications in the past. This is particularly concerning in an age when data protection is so important, as is clarity when it comes to data security.<\/p>\n

Outcome after the finding of the Worcester GP data breach<\/strong><\/h3>\n

Now there has been a finding in the Worcester GP data breach investigation, an apology has been issued. It\u2019s also understood that the problems surrounding the original dispute about there not being a breach is also going to be looked at.<\/p>\n

Speaking about the incident, the ICO said that Severn Valley Medical Practice had \u201cnot complied with their data protection obligations\u201d and that the data in question was \u201cinappropriately disclosed\u201d.<\/p>\n","protected":false},"excerpt":{"rendered":"

NHS England has ruled in an investigation into a Worcester GP data breach after previous findings suggested that the law had not been broken. In this unusual case, the Severn Valley Medical Practice reportedly posted information online about a patient. Initially, the Practice is understood to have disputed that any data protection breach had occurred. … Continue reading U-turn in Worcester GP data breach case<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":2958,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[113,53,52,43,1],"tags":[10,14,107,95,35,13],"class_list":["post-3605","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-data","category-healthcare","category-ico","category-latest","tag-data-breach","tag-data-controllers","tag-gp-data-breach","tag-medical-data-breach","tag-nhs","tag-personal-data"],"yoast_head":"\nU-turn in Worcester GP data breach case - Data Leaks, Breaches & Hacks<\/title>\n<meta name=\"description\" content=\"NHS England has ruled in an investigation into a Worcester GP data breach after previous findings suggested that the law had not been broken.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"U-turn in Worcester GP data breach case - Data Leaks, Breaches & Hacks\" \/>\n<meta property=\"og:description\" content=\"NHS England has ruled in an investigation into a Worcester GP data breach after previous findings suggested that the law had not been broken.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case\" \/>\n<meta property=\"og:site_name\" content=\"Data Leaks, Breaches & Hacks\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/YourLawyersUK\/\" \/>\n<meta property=\"article:published_time\" content=\"2019-03-01T07:30:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/hospital-data-breaches-facebook.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@YourLawyers_\" \/>\n<meta name=\"twitter:site\" content=\"@YourLawyers_\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case\"},\"author\":{\"name\":\"Author\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/f7dbb62d66bc619a4a9dde7afb9aa6b3\"},\"headline\":\"U-turn in Worcester GP data breach case\",\"datePublished\":\"2019-03-01T07:30:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case\"},\"wordCount\":390,\"publisher\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/hospital-data-breaches-facebook.png\",\"keywords\":[\"data breach\",\"data controllers\",\"gp data breach\",\"medical data breach\",\"nhs\",\"personal data\"],\"articleSection\":[\"Cybersecurity\",\"Data\",\"Healthcare\",\"ICO\",\"Latest\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case\",\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case\",\"name\":\"U-turn in Worcester GP data breach case - Data Leaks, Breaches & Hacks\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/hospital-data-breaches-facebook.png\",\"datePublished\":\"2019-03-01T07:30:57+00:00\",\"description\":\"NHS England has ruled in an investigation into a Worcester GP data breach after previous findings suggested that the law had not been broken.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case#primaryimage\",\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/hospital-data-breaches-facebook.png\",\"contentUrl\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/hospital-data-breaches-facebook.png\",\"width\":1200,\"height\":630,\"caption\":\"compensation advice for hospital data breaches\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/u-turn-in-worcester-gp-data-breach-case#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"U-turn in Worcester GP data breach case\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/\",\"name\":\"Data Leaks, Breaches & Hacks\",\"description\":\"Latest News, Articles & Opinions\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#organization\",\"name\":\"Data Leak Lawyers\",\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/yl_dll_amp.png\",\"contentUrl\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/yl_dll_amp.png\",\"width\":288,\"height\":70,\"caption\":\"Data Leak Lawyers\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/YourLawyersUK\\\/\",\"https:\\\/\\\/x.com\\\/YourLawyers_\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/f7dbb62d66bc619a4a9dde7afb9aa6b3\",\"name\":\"Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6df762ce646241b4e07c2c84d0016582f85c0b3c6f2ce06d0eb5d9aed612cc4e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6df762ce646241b4e07c2c84d0016582f85c0b3c6f2ce06d0eb5d9aed612cc4e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6df762ce646241b4e07c2c84d0016582f85c0b3c6f2ce06d0eb5d9aed612cc4e?s=96&d=mm&r=g\",\"caption\":\"Author\"},\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/author\\\/matthew\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"U-turn in Worcester GP data breach case - Data Leaks, Breaches & Hacks","description":"NHS England has ruled in an investigation into a Worcester GP data breach after previous findings suggested that the law had not been broken.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case","og_locale":"en_GB","og_type":"article","og_title":"U-turn in Worcester GP data breach case - Data Leaks, Breaches & Hacks","og_description":"NHS England has ruled in an investigation into a Worcester GP data breach after previous findings suggested that the law had not been broken.","og_url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case","og_site_name":"Data Leaks, Breaches & Hacks","article_publisher":"https:\/\/www.facebook.com\/YourLawyersUK\/","article_published_time":"2019-03-01T07:30:57+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/hospital-data-breaches-facebook.png","type":"image\/png"}],"author":"Author","twitter_card":"summary_large_image","twitter_creator":"@YourLawyers_","twitter_site":"@YourLawyers_","twitter_misc":{"Written by":"Author","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case#article","isPartOf":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case"},"author":{"name":"Author","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#\/schema\/person\/f7dbb62d66bc619a4a9dde7afb9aa6b3"},"headline":"U-turn in Worcester GP data breach case","datePublished":"2019-03-01T07:30:57+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case"},"wordCount":390,"publisher":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#organization"},"image":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case#primaryimage"},"thumbnailUrl":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/hospital-data-breaches-facebook.png","keywords":["data breach","data controllers","gp data breach","medical data breach","nhs","personal data"],"articleSection":["Cybersecurity","Data","Healthcare","ICO","Latest"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case","url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case","name":"U-turn in Worcester GP data breach case - Data Leaks, Breaches & Hacks","isPartOf":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case#primaryimage"},"image":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case#primaryimage"},"thumbnailUrl":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/hospital-data-breaches-facebook.png","datePublished":"2019-03-01T07:30:57+00:00","description":"NHS England has ruled in an investigation into a Worcester GP data breach after previous findings suggested that the law had not been broken.","breadcrumb":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case#primaryimage","url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/hospital-data-breaches-facebook.png","contentUrl":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/hospital-data-breaches-facebook.png","width":1200,"height":630,"caption":"compensation advice for hospital data breaches"},{"@type":"BreadcrumbList","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/u-turn-in-worcester-gp-data-breach-case#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.dataleaklawyers.co.uk\/blog"},{"@type":"ListItem","position":2,"name":"U-turn in Worcester GP data breach case"}]},{"@type":"WebSite","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#website","url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/","name":"Data Leaks, Breaches & Hacks","description":"Latest News, Articles & Opinions","publisher":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dataleaklawyers.co.uk\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#organization","name":"Data Leak Lawyers","url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/yl_dll_amp.png","contentUrl":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/yl_dll_amp.png","width":288,"height":70,"caption":"Data Leak Lawyers"},"image":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/YourLawyersUK\/","https:\/\/x.com\/YourLawyers_"]},{"@type":"Person","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#\/schema\/person\/f7dbb62d66bc619a4a9dde7afb9aa6b3","name":"Author","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/6df762ce646241b4e07c2c84d0016582f85c0b3c6f2ce06d0eb5d9aed612cc4e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/6df762ce646241b4e07c2c84d0016582f85c0b3c6f2ce06d0eb5d9aed612cc4e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6df762ce646241b4e07c2c84d0016582f85c0b3c6f2ce06d0eb5d9aed612cc4e?s=96&d=mm&r=g","caption":"Author"},"url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/author\/matthew"}]}},"_links":{"self":[{"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/posts\/3605","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=3605"}],"version-history":[{"count":1,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/posts\/3605\/revisions"}],"predecessor-version":[{"id":3606,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/posts\/3605\/revisions\/3606"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/media\/2958"}],"wp:attachment":[{"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=3605"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=3605"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=3605"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}