Image Recognition
Staff at NHS Lanarkshire - which serves over half a million Scottish residents - used WhatsApp to swap photos and personal info about patients, including children's names and addresses. Some of this info included clinical information, and therefore "special category" data in breach of Article 9 of the UK GDPR. This, the watchdog said, "demonstrates that information governance expectations regarding WhatsApp were not understood by staff involved in the WhatsApp Group." It added:Communications were sent to both all staff and Teams with the instruction not to use WhatsApp for sharing personal data. All phones were deprovisioned, which NHS Lanarkshire confirmed deleted the chat, and staff have been issued with new phones.