Moray MP Douglas Ross has raised concerns about a “serious” data breach at the Scottish Ambulance Service (SAS) after being contacted by a whistle-blower member of staff.
Documents containing personal information about staff were allegedly removed from a locked file within a local manager’s office, which was also locked.
Mr Ross was told the notes were read by members of staff and then discarded into a cardboard box in a store room for a year. The box was apparently transferred to the SAS base in Forres and left unsecured in a garage where workers were again able to view the contents.
In a written response to the Moray MP, the SAS confirmed that they were alerted to an incident involving confidential information about staff that had been left on SAS premises in September this year, and that a “detailed investigation” is now ongoing.
Scottish Conservative MP for Moray Douglas Ross said:
“This appears be a serious breach of GDPR regulations on the safe storage of sensitive and confidential material.
“It is very concerning to me that this has happened within what should be secure areas of Scottish Ambulance Service premises in Moray.
“The fact that these documents seem to have been passed around some of the staff is worrying.
“I have made clear in my communication with the SAS that instances like this can be very damaging for staff morale.
“Staff confidence in the ability of the SAS to securely store confidential material will also be seriously undermined.
“The SAS is, however, taking this seriously and a full and detailed investigation is now underway.”