To report ex friend who looked at my medical files?

This is definitely revenge. It's nothing to do with 'so she can't access my file again' it's literally just so you have one up on her. Pathetic and immature. If you were that bothered you'd have reported it at the time whether you trusted her then or not

Not friends or family though. A serious offence.

No, there will be controls snd warnings dependent on the application in use and the degree of security controls set up.

What reason did she give for accessing yr file, was she trying to be helpful ie suggest you ho on another consultant waiting list etc.

Also you mentioned there was a friend present, did she ever explain why she mentioned it?

Finally has she shared/discussed with someone else what she found?

Absolutely and is gross misconduct to access someone’s notes for personal information, and to break confidentiality.

She needs to be reprimanded for this.

I agree with reporting it OP. If she is did it to you she will do it to others.

I don't work in healthcare but in my job I do have access to people's very private information. I know beyond a doubt that I would lose my job if I were to be nosy enough to delve into a friend's records, even if it were under the pretext of "understanding what they are going through". It's drilled into us at every turn.

Yes, you should have reported it at the time but your concern that she may access your records again are genuine, especially if she has got away with it before and thinks she can again.

Nah. GDPR makes it very clear, and health services have got more strict on this specific point as time has gone on. Even if a friend, relative or colleague gives you permission or even asks, you should not access their information you have no need to see. OP wouldn't get dragged into the investigation at all. Data Controllers aren't daft, they know stuff gets tit for tat and that's one reason this rule exists, so employees can't blame the other person.

This. It feels like you are only reporting her to get one over on her now you have fallen out. She definitely shouldn't have done it, and you would certainly have been within your rights to report her, but reporting now is quite underhand

This is appalling! You must report her, she has no integrity or sense of loyalty. This is possibly a sacking offence. I would not let her be in a position where confidentiality is a qualification for the job, if I managed her. If she is using this information against you, it may even be a police matter.

Do you have something like SystmOne set up? You can go into your account there, and it will show you who has accessed your file and when. You can't see to what extent they've accessed it, though, as it can be from receptionists looking at the basic details only to make an appointment, to a clinician reading the acdtual notes. But you can get an idea of who has looked at least. The records seem to go back quite a while, so you could see if her name appears more often than you'd have expected, or in a time period beyond when she would have potentially had reason to look.

I think surgery admins have access to NHS records when required to update them

Report her.

She said she wanted her record restricted so that ex friend couldn't carry on snooping in it. If that results in ex friend losing her job for being a nosy cow and looking in op's medical records without cause and probably the records of others then good.

No one should be accessing people they know files. Report.

You want to make trouble for her because you've fallen out. Let's call a spade a spade.

If you were THAT bothered about her looking up your records when it happened, you'd have reported it then.

Reporting her now just makes you look as spiteful as whatever it is she's done to you to cause this fall-out.

Yes. Totally missed that. As I understand it her friend wasn’t involved in her care. She had no reason to access her medical records. And works for track and trace. I don’t see anywhere where she says her friend was a hcp caring for her requiring access. That’s very different. I have cared for relatives of friends but have always checked they’re comfortable with me being involved. If I wasn’t I would never look at their personal records. Very different.

Please, please do report her- if she will do it to you she will do it others and it’s a huge breach of trust - they need to be aware

Report them. Sorry but that’s a huge breach of trust and an invasion of your privacy. They know the rules on accessing data. Staff know the rules.

They could be looking at other people’s data without their consent or for any work related reason. Either they or their workplace need to tighten up their data security.

Almost impossible to prove but will put her on a radar with her managers.

She wo t loose her job unless there has been previous form/history, but will serve as a warning to not snoop again.

I'm an ex application manager at nhs ict team...

She will definitely lose her job if you report this just so you are aware

It's gross misconduct and a potentially sackable offence.

No. Your not being unreasonable.

However if the incident happened a year ago, its unlikely the system will hold that datsttodate. All system users keystrokes are logged ie what records they accessed?, any additional, edits or deletion of record and as you can imagine, the tables get full very quickly..

Usually the access history is only held for a short period ie 7 days before being wiped. So it very much dependent on system design but if she already had clearance to access yr records, I suspect they're won't be anything flagged as a potential security breach.

Certain record types are ringfenced eg child health records for example, when professionals in other areas try access these, a potential security breach may be flagged.

As she's informed other people, yes I'd certainly report it, even if nothing can be proven, it will mKe her cautious about snooping on other peoples records again anytime soon.

Report her. How many other people's records has she also accessed? Your's almost certainly isn't the only one.

I work in the NHS and there’s no warnings. It’s all down to your own personal standards of conduct.
Once in the hospital I worked in, a celebrity came into A&E and everyone who looked at his notes without justification was sacked. It’s easy to trace and there’s no excuse.

Please please report her.

You should report her. You should have reported her a year ago.