Västra Götalandsregionen (VGR) has reported a technical fault in its digital health platform Vård och hälsa, used for some resident-focused care services. The fault created a risk that limited personal data, such as first and last names, could have been temporarily displayed to the wrong person after logging into the service. In some cases, there were incorrect links between children and guardians.
According to the supplier, no protected personal data was disclosed in connection with the incident, and no journal information or medical details were affected. The technical fault has been fixed, and VGR is in contact with the system supplier, which is investigating whether and to what extent patients may have been impacted. VGR currently lacks knowledge of specific affected individuals.
If specific individuals are identified, they will be contacted through their care provider. VGR has reported the incident as a personal data incident to the Swedish Authority for Privacy Protection (IMY).