NHS email encryption

Roger Hayter ukcrypto at chiark.greenend.org.uk
Mon, 27 Aug 2007 08:07:35 +0100


In message <op.txomon146hl8nm@clerew.man.ac.uk>, Charles Lindsey 
<chl@clerew.man.ac.uk> writes
>On Sun, 26 Aug 2007 13:58:49 +0100, Adrian Midgley 
><amidgley2@defoam.net>  wrote:
>
>> But the assertion made to us is that nhs.net mail gives us secure access
>> to our mail (IE maintaining "end to end" encryption) from eg home, when
>> we read it collecting it from/using the nhs.net servers which are
>> provided for access to internal mail from outside.
>
>Then they have a funny idea of what "end" means :-( .
>
>It seems it is kept secure from everyone except the ones I would expect 
>you most wanted to hide it from.
>

As I remarked on this thread, users of NHS systems can have no 
expectation of privacy *from* the government.  The government already 
assert the right to use hospital administrative and care record data for 
central administrative purposes and for clinical audit.  There is a lot 
of pressure to allow it to be used it for medical research (which would 
include selling the information to drug companies).  It would be 
entirely consistent with this policy to archive the plain text of all 
NHS email.  Our only legitimate concern would be the ability of the 
central system to keep our email out of the hands of third parties.
-- 
Roger Hayter