From: security curmudgeon (jerichoattrition.org)
Date: Fri Dec 21 2007 - 02:45:56 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

---------- Forwarded message ----------
From: InfoSec News <alertsinfosecnews.org>

http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2007/12/20/ndocs120.xml

By Rebecca Smith
Medical Editor
20/12/2007

Computer security failures that allowed sensitive personal details of
junior doctors applying for training posts to be viewed by others were an
"unacceptable breach of security" by the Department of Health, the
Information Commissioner has found.

The sensitive details of thousands of doctors, including religious beliefs
and sexual orientation, could be seen by anyone logging on to the Medical
Training Application Service site.

The commissioner said the Department of Health had breached the Data
Protection Act and warned that if it happened again the department would
be prosecuted.

The findings increase pressure on ministers over the handling of sensitive
personal data and follows a series of security blunders.

[..]
_______________________________________________
Dataloss Mailing List (datalossattrition.org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]