Plans to strengthen the NHS against cyber-attacks and protect patient data have been announced with the Government investing £50 million in cyber security.
This follows recommendations by the National Data Guardian and the Care Quality Commission.
To strengthen the safeguarding of information, the National Data Guardian’s position will be put on a statutory footing.
‘Your Data: Better Security, Better Choice, Better Care’ is the government’s response to the:
- National Data Guardian for Health and Care’s Review of Data Security, Consent and Opt-Outs
- Public consultation on that review
- Care Quality Commission’s Review ‘Safe Data, Safe Care’
It sets out that the Government accepts the recommendations in both the National Data Guardian review and the Care Quality Commission review.
To mitigate the immediate risks with cyber security, NHS Digital is supporting local organisations by:
- Broadcasting alerts about cyber threats.
- Providing a hotline for dealing with incidents.
- Sharing best practice across the health and care system.
- Carrying out on-site assessments.
Work is underway in parallel to determine the fastest and most cost effective way to support the NHS to move from unsupported operating systems, including Windows XP.
Health Minister Lord O’Shaughnessy said: “The NHS has a long history of safeguarding confidential data, but with the growing threat of cyber-attacks including the WannaCry ransomware attack in May, this government has acted to protect information across the NHS.
“Only by leading cultural change and backing organisations to drive up security standards across the health and social care system can we build the resilience the NHS needs in the face of a global threat.”
