What I'm still trying to work out is WHY they were sending disks at all. When I worked for the NHS, all payroll data was encrypted and sent electronically whether it was going to McKesson (who hold the contract for the HR/payroll system from hell known as the Electronic Staff Record) or via BACS to get people paid. I never worked for any of the Trusts mentioned and haven't worked for the NHS for a while now but it doesn't make any sense. I'm not surprised someone's been suspended for it but from the report I read, it sounded like the disks have been lost somewhere in the internal mail of the hospital and not necessarily ever left the hospital premises. They're probably sitting in Medical Records somewhere with Caroline's records..