I am posing a question on the behalf of my friend.
She has just been discharged from hospital after having a baby. She looked over the notification and other documents they gave her yesterday and found that they did not belong to her baby, but to another baby on the same ward. She contacted the hospital who informed her that they would provide her with another notification so that she could register her child and she should also give the documents to the midwife who will be visiting her on Friday. However she is not comfortable with doing this as she still will not have her baby's records.
I am aware that this a data protection breach and also information governance. What should she do?
She should contact the Information Commissioner's Office, who can advise on the correct cause of action. She has received information which she was not authorised to have, and needs to be careful that she does not hand them on to anyone else not authorised (no idea if the MW would be or not; perhaps she should ask the hospital to confirm in writing?)
The hospital should be providing her with the correct information asap. When and how have they said they will be sending it?