NHS cyber-attack - MDDUS advice to members


For immediate release: Monday, 15 May 2017

MDDUS is advising doctors affected by Friday’s ransomware attack to apply common sense principles when treating patients without access to computerised or other medical records to ensure safety is not compromised.

Following calls from MDDUS members concerned with the implications following the recent cyber-attack on some NHS IT systems, MDDUS Joint Head of Medical Division Dr John Holden said:

“Our members can be reassured that by following some simple steps to ensure patient safety at this time, they will have our support and access to indemnity in the unlikely event of a litigation claim or other complaint arising.

“If a doctor doesn’t have access to medical records, then we would advise them to act in the patient’s best interests and apply a traditional approach to the situation, tailored to the individual circumstances on a case-by-case basis.

“Doctors are advised to revert to time-honoured methods of noting a detailed history by making hand-written records, ensuring they are accurate, legible, contemporaneous, timed and dated.

“Once their IT system has been restored, the hand-written note should be recorded within the patient’s electronic records, including the time and date of the original note, as well as the time and date it is uploaded. We would also advise that the paper records be retained and scanned to the electronic record. A template, such as that produced by the RCGP (see below) might be used.

“Given the absence of past medical history, doctors should take extra care to double check any relevant medical information with their patients and document these discussions.

“Doctors should prescribe for the minimum period necessary unless they are able to sufficiently verify the drug history. Other forms of communication such as telephone can be used to contact labs etc. if results are not available online.

“Finally, doctors are reminded to act within the limits of their expertise and if in doubt, seek advice from a senior colleague or their medical defence organisation.”

The RCGP has some guidance on steps GPs should take, including a template encounter record for patients to fill in. Details here

The latest information and guidance can be found on the NHS Digital website


For further information contact Richard Hendry on 0333 0434444 or 07976 272266, or email rihendry@mddus.com.

Note to editors

MDDUS (The Medical and Dental Defence Union of Scotland) is a medical and dental defence organisation providing access to professional indemnity and expert medico- and dento-legal advice for doctors, dentists and other healthcare professionals throughout the UK.

This page was correct at the time of publication. Any guidance is intended as general guidance for members only. If you are a member and need specific advice relating to your own circumstances, please contact one of our advisers.

For registration, or any login issues, please visit our login page.