Ombudsman's Deputy: Patient Privacy Often Insufficiently Protected at Pharmacies and Clinics

Buying prescription medicines at a pharmacy in Latvia does not always guarantee privacy: a person's ID number, full name and details of the medicines purchased can become known to other customers. This was discussed on the TV24 programme "Uz līnijas" by Deputy Ombudsman Laura Šāberte, who called on healthcare institutions and pharmacies to pay closer attention to protecting patient data.

Patient rights and obligations

Šāberte explained that patients are entitled to expect a healthcare facility to safeguard their information and not pass it to third parties without justification. Sometimes information must still be shared, for example with an insurance company so that the patient can receive compensation provided for in a contract. Even then, both sides must follow the principles of data protection and data minimisation, meaning no more information may be handed over than is necessary in the particular case.

Privacy is protected not only by data protection rules but also by the Patients' Rights Law. Even the fact that a person visits a medical facility or a pharmacy is protected. If a patient's full name is called out loud when summoning them to a specialist, those nearby can infer what health problems the person has. Likewise, the medicines bought at a pharmacy may tell others something about a customer's health.

Giving ID numbers and information screens

The programme also addressed stating one's personal ID number aloud when collecting medicines prescribed electronically. The situation is complicated by screens installed in pharmacies, which may display information about the customer and their purchases.

Earlier on the same programme, Simona Krastiņa, a representative of the Ombudsman's Office, reminded viewers that under the General Data Protection Regulation a data controller must look after the protection of personal data. She advised people, where possible, to show their ID number in a document such as an identity card or passport rather than say it aloud. Another option is to write the necessary information on a slip of paper, which should then be taken away so it does not end up in other people's hands.

Asked about changes at pharmacies with large information screens, Šāberte stressed the need to educate both healthcare facilities and pharmacies about protecting patients' rights, since patient data deserve special protection.