HSE Fined Over Poor Storage of Sensitive Medical Records
The Health Service Executive (HSE) has been ordered to pay a fine of €645,000 following a serious data protection breach. The penalty was issued by the Data Protection Commission after an investigation revealed that thousands of sensitive medical records were left in unsafe conditions at two former psychiatric hospitals.
Investigators discovered that the paper files were stored in buildings that were not secure. In some areas, the records were found mixed with rubble and animal droppings. The investigation began after reports emerged that members of the public had gained unauthorised access to these disused facilities, putting the private information of many patients at risk.
The Data Protection Commission stated that the HSE failed to protect the personal data of individuals as required by law. The records contained sensitive health information, which should have been destroyed or moved to a secure location when the hospitals closed. The poor state of the buildings meant that the documents were not only accessible to strangers but were also rotting due to neglect.
In response to the fine, the HSE has acknowledged the failure and apologised for the incident. They have promised to review how they store and dispose of old medical files across the country to ensure that patient privacy is better protected in the future. This case serves as a significant reminder of the importance of data security for all public organisations in Ireland.