title: Disaster easily averted? Data confidentiality and the hospital desktop computer.
abstract: OBJECTIVE
  We specifically identified the hospital desktop computer as a potential source of breaches in confidentiality. We aimed to evaluate if there was accessible, unprotected, confidential information stored on the desktop screen on computers in a district general hospital and if so, how a teaching intervention could improve this situation.
  
  
  METHODS
  An unannounced spot check of 59 ward computers was performed. Data were collected regarding how many had confidential information stored on the desktop screen without any password protection. An online learning module was mandated for healthcare staff and a second cycle of inspection performed.
  
  
  METHODS
  A district general hospital.
  
  
  METHODS
  Two doctors conducted the audit. Computers in clinical areas were assessed. All clinical staff with computer access underwent the online learning module.
  
  
  METHODS
  An online learning module regarding data protection and confidentiality.
  
  
  RESULTS
  In the first cycle, 55% of ward computers had easily accessible patient or staff confidential information stored on their desktop screen. This included handovers, referral letters, staff sick leave lists, audits and nursing reports. The majority (85%) of computers accessed were logged in under a generic username and password. The intervention produced an improvement in the second cycle findings with only 26% of computers being found to have unprotected confidential information stored on them.
  
  
  CONCLUSIONS
  The failure to comply with appropriate confidential data protection regulations is a persistent problem. Education produces some improvement but we also propose a systemic approach to solving this problem.
authors.affiliation: Calderdale Royal Hospital, West Yorkshire, United Kingdom. Electronic address: neerajsethi@doctors.org.uk.
authors.forename: Neeraj
authors.initials: N
authors.lastname: Sethi
authors.affiliation: Calderdale Royal Hospital, West Yorkshire, United Kingdom.
authors.forename: Gethin
authors.initials: G
authors.lastname: Lane
authors.affiliation: Calderdale Royal Hospital, West Yorkshire, United Kingdom.
authors.forename: Sophie
authors.initials: S
authors.lastname: Newton
authors.affiliation: Leeds Institute of Molecular Medicine, United Kingdom.
authors.forename: Philip
authors.initials: P
authors.lastname: Egan
authors.affiliation: Calderdale Royal Hospital, West Yorkshire, United Kingdom.
authors.forename: Samit
authors.initials: S
authors.lastname: Ghosh
mesh_terms: D001291:Attitude of Health Personnel; D016494:Computer Security / Q000331:legislation & jurisprudence / Q000592:standards*; D003219:Confidentiality / Q000331:legislation & jurisprudence / Q000592:standards*; D006801:Humans; D016247:Information Storage and Retrieval; D019300:Medical Errors / Q000517:prevention & control*; D008499:Medical Records / Q000331:legislation & jurisprudence / Q000592:standards; D008505:Medical Staff, Hospital / Q000331:legislation & jurisprudence / Q000523:psychology* / Q000592:standards
keywords: Confidentiality; Data protection; Desktop; Information governance