The Health Service Executive confirmed in June 2009 that a total of fifteen laptops had been stolen from the HSE Community Care Office in Roscommon. Of the fifteen laptops stolen, thirteen were encrypted while the other two were password protected, but not encrypted. The HSE confirmed at the time that it was satisfied that there was no identifying information in relation to patients or clients on one of the unencrypted laptops, while the other contained information relating to a social worker's case notes involving nine families.
The HSE further confirmed at the time that it fully recognises the obligation it has in relation to the personal and sensitive information that it holds and is fully committed to ensuring its protection. The HSE has a comprehensive set of information security policies in place which are based on respecting and protecting the privacy and confidentiality of the information it holds at all times. These policies cover electronic communications, acceptable use of information and communications technology, password standards, encryption and security of mobile devices. The policies apply to all information held by the HSE, all ICT technology resources and all users of HSE information. Following the theft of laptops in Roscommon, the HSE further updated its security procedures to ensure that all laptops are encrypted prior to being issued to staff.
The break in at the Roscommon premises was reported to Gardaí immediately following its discovery. The latest update available to my Department indicates that none of the stolen laptops have to-date been recovered. I have not been informed of any prosecutions arising in relation to the incident and I am not in receipt of information from the HSE regarding any implications for the investigation into the Roscommon incest case arising from the theft of the laptops. I wish to advise the Deputy that due to industrial action affecting the HSE it is not possible for the Executive to supply current information in relation to these issues. If this matter remains of continuing concern to you, however, I would invite you to raise it with me again in due course.