The security industry should come together to educate NHS trusts and other organisations on simple measures to protect data.