[ISN] Hacker threat to records

From: InfoSec News (isn@private)
Date: Thu Jun 30 2005 - 00:47:09 PDT


http://www.thesun.co.uk/article/0,,2-2005300108,00.html

By JACQUI THORNTON
Health Editor
June 30, 2005

PLANS to put patients' medical records on a central computer will put
millions at risk from hackers, GPs said yesterday.

They fear that releasing information to the system would betray
patients' trust, leaving people wide open to ID theft and other
abuses.

The new electronic health record system being overseen by Health
Secretary Patricia Hewitt will allow doctors to see patient records
anywhere in England.

But Dr Eleanor Scott, a GP from Barnet, North London, told the British
Medical Association's annual conference that there would be huge
potential for unauthorised access.

And patients may become reluctant to talk about stigmatising
conditions such as sexually-transmitted diseases or mental illness.

She added: "Any such database presents a minefield of confidentiality
issues. Medical records could be accessed by many people working where
security is difficult to achieve.

"The risks of errors, unauthorised access, identity theft and
malicious tampering are legion."

She said the database would include details of hobbies, jobs,
religion, family and friends.

And Dr Scott told delegates in Manchester the system would cost more
than £30billion to set up - far more than the Government's national
identity card scheme.

Vivienne Nathanson, the BMA’s head of ethics, said the database may be
useful but warned that 100 per cent security was "unachievable".

Dr Simon Eccles, NHS head of IT, said people would not have to give
information about certain medical conditions.



_________________________________________
Attend the Black Hat Briefings and
Training, Las Vegas July 23-28 - 
2,000+ international security experts, 
10 tracks, no vendor pitches.
www.blackhat.com 



This archive was generated by hypermail 2.1.3 : Thu Jun 30 2005 - 00:59:16 PDT