Get all your news in one place.
100’s of premium titles.
One app.
Start reading
Liverpool Echo
Liverpool Echo
National
David Humphreys

Liverpool hospital trust in the clear over email information breach

No further action will be taken by the Information Commissioner against Liverpool’s main hospital trust after the personal information of thousands of staff was emailed to hundreds of people.

It was revealed last month how in December 2022, a file was sent by email to hundreds of managers at the Liverpool University Hospital Foundation Trust (LUHFT) - which includes the Royal and Aintree hospitals - which included the personal information of thousands of staff members including names, addresses, National Insurance numbers and salaries. James Sumner, LUHFT chief executive, confirmed to a meeting of the Trust’s board that the Information Commissioner’s office had determined no further action would be taken following the breach.

In his written board report, Mr Sumner said the breach arose as a consequence of the “unintentional sharing” of personal staff information with Trust managers, via email, during a file sharing exercise that was conducted to support management of payroll details as part of arrangements around strike action. Trust staff were informed by email on February 8 of the data breach with Mr Sumner issuing letters to those impacted.

READ MORE: Thomas Cashman trial updates as mum says 'I couldn't shut the door' before Olivia Pratt-Korbel shot

The chief executive’s report said the Trust undertook a full email recovery and deletion process and reported itself to the Information Commissioner. In an update from Rob Forster, chief finance officer and deputy chief executive, it was said an internal review of the data breach was “drawing towards finalisation” and would be subject to independent external assessment before its findings were released.

It is expected it will be released to Trust officials by the end of this month. The board meeting at the new Royal Liverpool Hospital was told of a formal warning issued to the Trust by the Health and Safety Executive (HSE)

On January 27, the HSE undertook a cyclical inspection of Liverpool Clinical Laboratories (LCL) facilities. While inspectors commended the overall management system at LCL, concerns were raised about a “nominal risk gap” in its health and safety arrangements. A written report by Helen Garnett, senior corporate governance officer, said a follow-up meeting was requested by HSE whereby it was revealed the Trust would receive further enforcement in the form of an improvement notice.

According to a supplementary report, this was in relation to “the inability to provide a written scheme of examination for pressure systems.” The deadline to comply with the requirements of the HSE is May 3, with the Trust’s executive quality and safety group overseeing progress.

Concerns have also been raised regarding the number of documents the Trust holds which are out of date. Ms Garnett’s report said 839 outstanding documents were in need of review, with a call to action issued to those responsible to ensure appropriate assessments were undertaken.

Receive newsletters with the biggest and breaking TV and showbiz news by signing up here

READ NEXT

Thomas Cashman trial updates as jury told of moment mum realised Olivia Pratt-Korbel had been shot

Man, 44, dies on Jet2 flight after crew declares emergency

The quaint town John Bishop calls home

Family heartbreak as dad died hours after his daughter's funeral

Argos selling 'small but mighty' £60 dehumidifier shoppers say 'works a treat'

Sign up to read this article
Read news from 100’s of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.