Doorstep Dispensaree Ltd

Doorstep Dispensaree, a pharmacy delivering medication to care homes, was fined after ICO inspectors discovered approximately 500,000 documents — including patient names, addresses, dates of birth, NHS numbers, medical conditions, and prescription details — stored in unlocked caged trolleys in an external car park, exposed to the elements and accessible to anyone. The documents, some dating to 2016, had no document retention schedule or secure destruction procedures. The ICO found the pharmacy had failed to implement any of the basic physical security measures required for health records.