This seems innocent enough:
Of course, that laptop:
- Runs Windows
- Has unused USB and Firewire ports
- Has active WiFi networking
- Doesn’t have a screensaver timeout
- Was left alone with a patient
- Is not locked
I mentioned to my doctor that, if I were of malign intent, I would now have complete control of every PC on their network. That didn’t make much of an impression, as the same thing happened on my next visit.
Of course, moving to electronic records makes a lot of sense, but if you think they’ll be any more secure than any other online personal information, you’re wrong.