Home / Health / Hospital Worker Breached 200 Patient Records
Hospital Worker Breached 200 Patient Records
19 Aug
Summary
- Worker accessed up to 200 patient records without permission.
- Information was shared, including screenshots to a partner.
- Staff member received only a police caution for their actions.
A hospital employee at a Somerset NHS trust accessed records belonging to up to 200 individuals without proper authorization over a six-year period, from August 2017 to October 2023. This breach involved accessing demographic information like names, addresses, and dates of birth, and evidence suggests information was shared externally, including screenshots sent to a partner.
The staff member resigned before any disciplinary action could be taken. Investigations by Avon and Somerset Police resulted in the individual receiving a conditional police caution, with officers determining the actions were not malicious and did not involve financial gain.
Victims expressed outrage, with one stating the worker didn't just breach data but "violated families." The Information Commissioner's Office (ICO) supported the allegation of unlawful data acquisition but concluded appropriate action had been taken, closing the case without further regulatory action.
This incident occurred within a broader context of widespread NHS data breaches, with over 1,400 serious breaches recorded recently. While the trust apologized for the breach, critics highlight the inadequacy of the response and call for greater transparency, suggesting patients should receive automatic notifications when their records are accessed.
