Health boards across the north and north-east have lost dozens of confidential patient records in recent years, the Press and Journal can reveal.
In the last five years there have been more than 125 incidents, including patient documents found dumped in a bin and in a hospital car park.
The figures also show there have been more than 700 incidents of information being lost, leaked and other breaches of the Data Protection Act by health boards across Scotland.
The true figure, however, is likely to be higher as only 11 of the 14 health boards responded to the Liberal Democrats’ freedom of information request.
The party’s health spokesman Jim Hume said: “NHS staff work extremely hard under an enormous amount of pressure but there must be a vigilant approach when it comes to protecting confidential patient information.”
“We have no choice but to trust the people looking after our families to look after their personal details too.”
Since 2009, NHS Grampian has had 66 incidents. NHS Highland had 19 incidents, but it only lost data in three of the five years.
NHS Orkney lost patient records 41 times, including documentation found in a bin, on the road, in a hospital car park and at a commercial premises.
Health boards insisted that all steps were taken to protect personal information and update security.
NHS Orkney chief executive Cathie Cowan said: “We have very clear guidelines about security and the need for vigilance. All staff are regularly reminded of their responsibilities to ensure that records are properly secured under our data security policies.
“All breaches are fully investigated and appropriate action is taken to reduce the risk of similar incidents happening again.”
Mary Scanlon MSP said: “The health service is a multi-million pound service. It goes a wonderful job at treating patients. I think it is little to ask them to ensure that patient confidentiality is adhered to.
“I think it is totally unacceptable and I find it quite insulting and disrespectful to patients that their confidential records are being found in car parks and bins.”
A spokeswoman for NHS Grampian said: “We take our duty to protect patient data seriously and any loss of data or breach of confidentiality is regrettable.
“These figures should be seen in context – we have approximately half a million patient contacts every year.
“All staff are encouraged to report any data issues using our DATIX system. This allows supervisors to properly investigate and gives all staff the opportunity to learn lessons from an incident.
“We also regularly remind staff of the importance of protecting both their patients and themselves and to practice good data security.”
Comment, Page 24