Data Security Breach Advice

Savvy_Sue

1813 said:

Savvy_Sue said:

1813 said:

I’m not sure savvy Sue does this make a difference?

Well, possibly. I've seen some which are half a screen long, stating that if you've been sent an email in error you must tell the sender, but also not misuse information you shouldn't have. It is possible that the 'wrong' recipient's actions are what they're instructed to do by the signature, and they're following that to avoid finding themselves in the wrong. For example, I've had an email from my GP surgery recently which had the following: 

This message may contain confidential information. If you are not the intended recipient please:
i) inform the sender that you have received the message in error before deleting it; and
ii) do not disclose, copy or distribute information in this e-mail or take any action in relation to its content (to do so is strictly prohibited and may be unlawful).
Thank you for your co-operation.

Sending someone's name and hospital number outside the organisation would, IMO, be a lot more serious. 

We haven't asked yet: are you in a union? If you are, contact your rep and ask for their support. 

I am a bank member of staff but I have considered asking citizens advice or ACAS. I have talked at length with my mother and I think she is fearful if I stir the pot it could be a lot worse for me because I could be, in her thinking, making more out of this than it’s worth, but I want to be prepared as much as I can in case anything does happen. 

A Union rep would be a better option than family. Please consider joining, Google union finder tool for the best one.

In my experience, you need at least 3 pieces of info to get you anywhere interesting in the NHS. 

LightFlare

Plasticman said:

This is one of the most common causes of a data breach. You've sent some (not particularly sensitive) personal information to somebody internal. You've raised it with your manager. I've never worked in the NHS but in most organisations you'd just be asked to be more careful and maybe asked to do some data protection training. I'd relax and get on with your job. 

I got the impression that it wasn’t internal.

With @nhs.net emails the entire establishment is covered.
The naming system isn’t particularly robust either, with same names - all they do is add a number after the name. We have some staff that are I to double figured. So John.Smith10@nhs.net

The only way to check if it’s the correct John Smith is to dig into the address book settings.

We actually had another yesterday sent from a hospital down south (I am north) - we just replied with “sorry,wrong recipient”

Dakta

"I got the impression that it wasn’t internal."

That's how I read it as well, if it was internal it doesn't stop it being a breach but let's just say it's a lot easier to deal with. 

I suspect OP's going to be ok in the long run