More staff snooping incidents than first reported – North Yorks NHS

​The York and Scarborough Teaching Hospitals NHS Foundation Trust has said that more cases of wrongful access to patient records by staff have taken place than it originally stated in response to a Freedom of Information (FOI) request.

​Since 2021, there have been 29 cases of inappropriate access to patient records, of which 10 were reported to the Information Commissioner’s Office (ICO).

​In July, the trust inaccurately said 18 employees wrongfully accessed medical records and eight cases were referred to the ICO, in response to the FOI submitted by the Local Democracy Reporting Service (LDRS).

​A spokesperson for the York and Scarborough NHS Trust said: “We identified that due to an error in collating the total number of cases, not all incidents were included in the overall figure provided, as they had been initially reported through a different route rather than directly through information governance.

​“This came to light through our routine data quality and assurance processes, and the correct information was duly provided. We have reviewed our reporting approach to ensure this information is brought together consistently in future.”

​The trust’s information governance team also offered its “apologies for this error” and regretted “any confusion caused”.

​The issue of wrongful access to medical records has received increased attention after staff at other NHS trusts in England were dismissed and investigated for inappropriately accessing the records of victims of the 2023 Nottingham attack and the Southport knife attack in 2024.

Scarborough Hospital. Courtesy Numminen/Ldrs

​Paul Arnold, chief executive officer at the ICO, has warned of a “worrying trend that requires a serious response across the healthcare sector” as a whole.

​“Recent high-profile cases point not to isolated incidents but to a worrying trend that requires a serious response across the healthcare sector,” he said.

​“When a local incident becomes national news – a serious crime, a public tragedy, a story that captures widespread attention – there is an increased risk that healthcare staff could be tempted to look at records they have no reason to view.”

York Hospital. Courtesy Numminen/LDRS

​In August, the NHS also updated its national guidance to health and care professionals on stopping unlawful access to records.

​“Accessing health and care records out of personal curiosity or for personal reasons is illegal. It causes real harm to patients and service users and could end your career,” the guidance states.

​The York and Scarborough NHS Trust previously said that all staff were expected to “uphold the highest standards when accessing patient information”.

​“Access is permitted only when it is directly relevant to a patient’s care, is closely monitored and audited, and any suspected breach of policy is thoroughly investigated.”

​A spokesperson added: “Where inappropriate access is substantiated, appropriate action is taken, which may include disciplinary action or referral to professional regulators.

​“All staff complete mandatory information governance training, with annual refresher training, and are regularly reminded of their responsibility to keep patient information safe.”

(Image: Newsquest)