The Data Protection Commission (DPC) has opened an “inquiry” into Children’s Health Ireland (CHI) relating to the physical safety and security of children’s health records at its Tallaght hospital.
Last month, The Irish Times reported the watchdog conducted an unannounced inspection of a shared office for non-consultant hospital doctors (NCHDs) on the first floor of the hospital on July 16th.
It is understood the door to the shared office, containing hundreds of patient charts, was propped open – making it accessible to people walking by. When closed properly, the door is locked with a keypad.
In a statement on Thursday, the DPC said it became aware there were “potential issues” at the site from a number of different sources, includingprotected disclosures and a breach notification submitted to the DPC by CHI.
RM Block
“This formal inquiry will examine CHI’s compliance with their GDPR obligations, in particular relating to the security of personal data and the processes that CHI have in place for managing physical records at CHI (Tallaght),” the statement said.
On the day after the unannounced inspection, Dr Turlough Bolger, a consultant in emergency medicine, sent an email to staff at the hospital highlighting concerns expressed by the commission.
“The report will be received in the coming weeks but they expressed concern regarding the number of charts in the room yesterday (approx 320 charts) and the amount of loose pages with patient details,” his email states.
“I expect that the recommendations will be wide-ranging and damaging to CHI at Tallaght.”
Dr Bolger said he appreciates the “hard work” made by staff to reduce the number of outstanding discharge charts in recent weeks, which has seen a “significant reduction” from 900 to 600 charts.
“I have said repeatedly that there needs to be a sustainable approach to this issue. Ultimately, as the accountable officer in CHI at Tallaght, I am responsible for the overall situation regarding medical records.”
Dr Bolger said as the accountable officer, he “cannot rely on blitzes to clear backlogs as routine”.
In order to clear the current backlog, Dr Bolger said he had requested that four NCHDs be allocated to discharges daily. He added that there was a need for “an emphasis on the use of the confidential shredding bin for most of the loose pages”.
A spokeswoman for CHI said “immediate measures” were taken after the unannounced inspection to reduce potential risks, “including reinforcing physical safeguards and engaging directly with staff”.
“Additional actions will follow, as appropriate, in line with our internal procedures and any recommendations issued by the DPC as part of its broader oversight,” she said.
The spokeswoman added that CHI is transitioning to a “fully digital health records system and, once complete, this will significantly reduce reliance on paper charts”.