Primary Care cybersecurity risk assessment and liability

Here’s information flow from a single-issue GP consult. Probably missing stuff. No ACC in that one, the place that still emails request for patient info via email, and has had breaches

GP going to arrange ‘due diligence’ on the entire system? We are sending information to then all. Just not possible. We rely on trust.

We couldn’t run our practice without a portal, and patients show by their use that they appreciate it. Open Notes, for example, one of the strongest patient empowerment tools out there.

So, we are all very disappointed by the breach. The usual trust hard to gain easily lost applies.

2 Likes