Hospital Authority Implements New Measures to Enhance Patient Data Security
******************************************************

The following is issued on behalf of the Hospital Authority:

    Regarding the recent cases of lost electronic storage device, Hospital Authority (HA) Chief Executive Mr Shane Solomon announced today (6 May) that the following new measures will be implemented in HA and all public hospitals with immediate effect:

    1. The HA patient information system will be enhanced in seven to 10 days so that patient information, such as name and ID number, can only be downloaded after encryption.

    2. As an interim measure before the completion of the system upgrading, no USB electronic devices can be taken outside the hospitals without prior approval from Hospital Chief Executives or their delegates.

    The new measures and relevant guidelines will be promulgated to all HA staff shortly.

    HA also noted the remarks of the Privacy Commissioner and will fully cooperate with the Commissioner's office in their investigation.

    Mr Solomon extended his apology to the patients concerned and the public for the recent electronic device losses happened in various hospitals.

Ends/Tuesday, May 6, 2008
Issued at HKT 20:41

NNNN