The Information Commissioner's Office (ICO) says a Manchester hospital breached the Data Protection Act when it failed to train a medical student, who was conducting research, to appropriately handle sensitive health information, The Guardian reports. The ICO said its investigation revealed that the hospital assumed the student had received data protection training at medical school and did not provide the same training it gives its staff. The hospital has agreed to ensure all students know the institution's privacy policies. ICO representative Sally-Ann Poole said, "This case highlights the need to ensure data protection training for healthcare providers is built in early on so that it becomes second nature." Meanwhile, the London Ambulance Service has agreed to an undertaking with the ICO in response to a breach of data on approximately 2,664 patients.  
Full Story