The Press Association reports that a "survey" carried out by a couple of doctors asking their chums to empty their pockets has revealed that some of them had patients confidential data about their person. Newspapers have provided the paranoia required by their readership and report that we are all doomed.
There is no need for surveys or letters from the Department of Health. It is time for baseball bat management. It is illegal to have uncontrolled copies of private data, it is unprofessional to have an IT system that allows data to be copied without control. It's not effective management if you can't get people to obey the law and behave professionally.
However we do need to apply some common sense. Doctors have to work in an environment where IT provision is patchy and incompetent. Who can blame a doctor making sure that she has got important information in case the computer goes down.
Once again the JustEnoughTechnology solution is common sense business processes. Please don't pour millions of pounds into more consultancy and IT when the answer is a few practice swings of the baseball bat