Manx Care 'failed to comply with data protection laws'

Information Commissioner orders healthcare provider to update medical record measures

Manx Care has failed to comply with data protection laws after a patient's electronic record included information relating to another person.

The Information Commissioner has issued an enforcement notice, ordering the Island's healthcare provider to bring its processing activities into compliance.

An investigation into the issue was launched in July 2022, and since then the Information Commissioner says Manx Care has made some progress.

Manx Care provided the IC with a plan showing it aims to meet a British Standard, but the commissioner says this standard is optional, whereas data protection legislation is not.

In March this year, Manx Care informed the commissioner that 30 incidents had been potentially linked to a medical record scanning issue, while the following month two additional full-time members of staff were being recruited.

The British Standard meant Manx Care was committed to checking 20% of records, but the additional staff members will allow it to move to 100%.

Despite the changes, the commissioner says the board has still failed to demonstrate how it complies with the principle of accuracy.

As a result, Manx Care must put in place measures to verify the accuracy of scanned electronic patient records.

Failure to comply with the enforcement notice could result in a fine of up to £1,000,000.

Responding to Manx Radio's request for comment, Manx Care says it "has responded to the needs of the Information Commissioner and is working to remedy their concerns."