Breaches, Reporting and Speaking Up

A personal data breach can take many forms: information sent to the wrong person, records lost, a device stolen, unauthorised access, a screen visible to others, paper left in public, or patient information altered or deleted by mistake. The professional response is to report promptly.

Dental nurses may worry that reporting a breach will cause trouble. Prompt reporting helps contain the incident, allows the practice to support the patient, meets legal duties and enables the team to learn from what happened.

Report promptly if

• Patient information is sent to the wrong recipient.
• Paper records, forms or printouts are lost or left in public view.
• A device containing patient information is lost or stolen.
• Someone accesses records without a legitimate reason.
• Information is altered, deleted or attached to the wrong patient by mistake.

Speaking up can feel difficult when the concern involves a senior colleague, dentist, practice owner or popular team member. Use calm, factual language: "I am concerned this may be a data protection issue and I think it needs logging." That focuses on the patient and the team's duty to act.

ICO reporting

Prompt reporting protects patients, supports legal compliance and helps the practice learn.