Northumberland, Tyne and Wear NHS Foundation Trust

Information Governance Department

Northumberland, Tyne and Wear NHS Foundation Trust

St Nicholas Hospital

Jubilee Road

Gosforth

Newcastle upon Tyne

NE3 3XT

FREEDOM OF INFORMATION ACT 2000

REQUEST REF2356

02/07/2015

Dear Mr Jones

Thank you for your email of 26/06/2015 requesting information under the Freedom of Information Act 2000 (FOIA). I am pleased to be able to respond to your request:

I am writing under the Freedom of Information Act to request answers to the following questions. Please can you acknowledge receipt of this request and respond within the timescales of the act.
1. / Do you allow USB memory sticks to be used in your organisation?
Yes - though only sticks bought and supplied by the Informatics Department are permitted, with other devices blocked by default.
2. / How many USB memory sticks have been issued?
534
3. / Please provide the make and model of USB memory sticks used in the organisation e.g. Kingston DataTraveler
- iStorage datAshur
- McAfee Encrypted
- Imation Defender
4. / Please provide the size of USB memory stick used in the organisation e.g. 4GB
1GB, 2GB, 4GB, 8GB
5. / Please provide the cost of a USB memory stick
Currently only provide iStorage datAshur 4 GB for £31.07
6. / Does the organisation allow personal or patient identifiable information to be stored on the device?
Yes
7. / Are USB memory sticks partially/fully encrypted. Please provide numbers or partial/fully (Note: There may be an unencrypted partition for non-personal information – this would be classed as partial)
All fully encrypted
8. / Please provide the number of USB Memory Sticks that have been lost / stolen in the last 5 years broken down by year and whether there was personal or patient identifiable information stored on them when lost.
Year / No. of Memory Sticks reported lost/stolen / Type of data on device
2010¹ / 1 / This device was not one of those allocated as part of our encryption program and was found in Trust grounds with no data on it. It is therefore not known whether it belonged to a patient or staff member.
2011 / 2 / Both contained patient information (NTW Encrypted USB Sticks)
2012 / 3 / All 3 contained patient information (NTW Encrypted USB Sticks)
2013 / No USB Memory Sticks reported lost/stolen
2014 / No USB Memory Sticks reported lost/stolen
2015² / 1 / Contained patient information (NTW Encrypted USB Stick)
TOTAL / 7 / ¹ From July ’10 onwards; ² As at 01/07/2015
9. / Please provide the Data Loss Prevention solution the organisation has in place
McAfee DLP as part of EPO

Please note that the information provided is the property of Northumberland, Tyne and Wear NHS Foundation Trust and subject to Intellectual Property and Database Rights. Any commercial application or use of this information may be subject to the provisions of the Re-use of Public Sector Information Regulations 2005.

This means that if you wish to re-use the information provided for commercial purposes for any reason you must seek the expressed consent of Northumberland Tyne & Wear NHS Foundation Trust. Any documents re-used for any purpose without expressed consent and the payment of an appropriate fee will be a breach of Copyright, Designs and Patents Act 1988.

To obtain access to information; and/or obtain consent for the re-use of copyright documents; and/or details of fees; please write to:

Sue Proud
Information Governance Manager
Northumberland, Tyne & Wear NHS Foundation Trust
St Nicholas Hospital
Jubilee Road
Gosforth
Newcastle upon Tyne
NE3 3XT
Email:

If you are not satisfied with the Trust’s response to your request you may ask us to review it. If you wish to do this, please write to the Information Governance Manager enclosing a copy of your original request and explaining your complaint.

Page 1 of 2