NHS Digital is revising the method for reserving Covid vaccinations following studies medical knowledge might be leaked from the web site.
In keeping with The Guardian, the web site solely requires fundamental private data to disclose an individual’s Covid vaccination standing.
The workplace of the Nationwide Information Guardian for well being and social care confirmed to Digital Well being Information it had been contacted by folks involved in regards to the “means that the coronavirus reserving web site works”.
To e book an appointment via the web site folks will want their NHS quantity, or be required to supply fundamental id data together with their identify, date of delivery and postcode.
However it was reported that in that course of, an individual’s vaccination standing is disclosed, which might enable anybody with fundamental private details about a good friend, member of the family or colleague, to entry their medical data.
In principle, it might enable employers to seek out out if their workers have been vaccinated, for instance.
The problem, first reported by The Guardian, is supposedly triggered due to completely different responses the web site provides to customers primarily based on their vaccine standing. Those that have had the jab get taken straight to a display asking for his or her vaccine reserving reference, whereas those that haven’t had the jab are taken to a screening web page.
For individuals who have had solely their first jab the web site reportedly permits them to e book their second dose with none additional verification.
Phil Sales space, coordinator of privateness group medConfidential, instructed Digital Well being Information the potential for knowledge leaks was “indefensible”.
He stated if the federal government wished to make use of affected person’s Covid-19 knowledge sooner or later it should first show “they’re competent and may be trusted”.
“Exposing folks’s medical data on this means is indefensible. It’s an avoidable error that ought to’ve been picked up on the design stage,” he stated.
A spokeswoman for the Nationwide Information Guardian for well being and social care stated: “The workplace for the Nationwide Information Guardian has been contacted by some people with considerations about the best way that the coronavirus reserving web site works.
“It is vital that it’s as easy and straightforward as attainable for folks to e book their vaccinations and we perceive that the web site has been developed to help this intention.
“The workplace of the Nationwide Information Guardian has contacted the organisations which run the web site to make sure that they’re conscious of the considerations which were raised and can talk about with them the dual vital goals of defending confidentiality while sustaining quick access to vaccinations for the general public.”
NHS Digital confirmed to Digital Well being Information it was working to revise the pages however assured the web site doesn’t have direct entry to medical information.
“The system doesn’t have any direct entry to anybody’s medical report and other people shouldn’t be fraudulently utilizing the service – it ought to solely be utilized by folks reserving their very own vaccines or for somebody who has knowingly supplied their particulars for this goal,” they added.