Insecurity is Bad for Your Health

Outrageous:

A shocking article appeared yesterday on the BMJ website. It recounts how auditors called 45 GP surgeries asking for personal information about 51 patients. In only one case were they asked to verify their identity; the attack succeeded against the other 50 patients.

IT's Got to be Local and Open

Nice story in the Guardian today about a local UK health system that works - unlike the massive, doomed, centralised NHS system currently being half-built at vast cost. It makes some important points:

Next week the annual Healthcare Computing conference in Harrogate will buzz with accusations that the national programme has held back progress. There are two reasons behind this charge. First, under the £1bn contracts signed early in the programme, hospitals have to replace their administrative systems which record patients' details with systems from centrally chosen suppliers. As this involves considerable local effort for little benefit, progress is painfully slow. The second problem is the potential threat to confidentiality arising from making records available on a national scale.

Quite: if there is no local benefit, there will be no buy-in, and little progress. Think local, act local, and you get local achievement. The other side is that if you impose a central system, security is correspondingly weaker. Hello, ID card....

Of course, there are many areas where you want to be able to bring together information from local stores for particular purposes. That's still possible - provided you adopt open standards everywhere. Hello, ODF....