Which statement would be considered a breach of the Data Protection Act in radiology practice?

Which statement would be considered a breach of the Data Protection Act in radiology practice?

• A. Taking a picture on screen is a breach of the Data Protection Act.
• B. Not wearing a lead apron constitutes data breach.
• C. Using a glass screen is data breach.
• D. Sharing patient data with a friend is acceptable.

Answer: (A)

Protecting patient information and preventing unauthorized access or disclosure is being tested. In radiology, the images and reports contain personal data that must be kept confidential and handled only by those with a legitimate need to know. Taking a picture of what’s on the screen creates an unauthorized copy of that data on a device outside the secure system. That copied data can be stored, shared, or lost, increasing the risk of disclosure and misuse, which is exactly what the Data Protection Act aims to prevent. The other scenarios relate more to safety or explicit disclosures rather than the act’s data-protection breach concepts (a photo of the screen is a clearer, immediate way to breach confidentiality).

Protecting patient information and preventing unauthorized access or disclosure is being tested. In radiology, the images and reports contain personal data that must be kept confidential and handled only by those with a legitimate need to know. Taking a picture of what’s on the screen creates an unauthorized copy of that data on a device outside the secure system. That copied data can be stored, shared, or lost, increasing the risk of disclosure and misuse, which is exactly what the Data Protection Act aims to prevent. The other scenarios relate more to safety or explicit disclosures rather than the act’s data-protection breach concepts (a photo of the screen is a clearer, immediate way to breach confidentiality).