Yet another data loss
David Hansen
ukcrypto at chiark.greenend.org.uk
Fri, 18 Jul 2008 14:54:45 +0100
<http://news.bbc.co.uk/1/hi/scotland/tayside_and_central/7513602.stm>
is about the loss of yet another computer, reputedly with "only" data
on 89 patients.
It appears that news of this has not been made public before, it was
stolen last month.
I don't know whether to be very angry or highly amused by the following
bit:
"The health authority said the laptop was kept in a locked cupboard and
was password-protected. [snip]
"The authority said the risk of the information being accessed by the
thieves was "very low"."
I say that, if that is the case, NHS Forth Valley don't have a clue
what they are talking about. When I take over running everything and
make things better the person who uttered that prattle will be amongst
those lined up against the wall for some "re-education":-)
When some bod lost a memory stick a few weeks ago we were told that
they were "experienced and resepected". Experienced in what? Respected
by whom, for what? I have no opinion on their medical virtues, but
someone who carries information round on a(n unencrypted) memory stick
is certainly not respected by me. Their experience of computer security
appears to be zero, though they have hopefully been put through a rapid
learing experience since the loss of the stick.
<http://news.scotsman.com/healthofthenhs/NHS-loses-patients39-
records.4251351.jp>
These are examples of the results which were predicted years ago by
those of us opposed to the government war on encryption.
--
David Hansen, Edinburgh
I will *always* explain revoked encryption keys, unless RIP prevents
me
http://www.opsi.gov.uk/acts/acts2000/00023--e.htm#54