The Data Protection Commissioner has called on the HSE to review the methods by which it stores medical records, after personal files were found in a bin outside Roscommon County Hospital.