To report ex friend who looked at my medical files?

This is why it needs to be reported, I reckon - this sort of breach undermines the trust we should have in the whole medical profession. You probably can't stop it happening completely, but the general public need to know it gets taken very seriously.

If it was your physical record there is no way of proving she looked.
If it's an electronic record there will be an audit trail showing that she accessed your record and she will disciplined (I would imagine her employment would be terminated - viewing records without clinical reason is a gross misconduct offence).

My sibling works for NHS in a clerical role? They are a nightmare for looking at people they knows medical notes, and freely says, by not clicking into the full file, but hovering over it, you can read notes.
It infuriates me, but though my family don't agree this is OK, don't want the goldenchild reported as they'll lose their job and have young kids, it's disgraceful to nose at people's medical notes that have nothing to do with you , so I would seriously consider reporting.

Is it not also criminal as well as sackable. However one problem how are you going to prove it beyond all reasonable doubt. Unless you’ve videotaped the conversation of her admitting that she accessed your records.
Surely, theyre not just going to take your word for it are they. Your EX friend could argue that you’re only saying that to get back at her. The burden of proof is on you it’s not on her to disprove it.

i presume this is the friend you started your other thread about… who has lost items you lent them?

This really freaks me out actually I have friends who are doctors none of them have treated me but I’d hate to think they were looking at my medical records!

We don't know if the person did or didn't do anything with the data. You can't make this assumption. All OP knows is that they mentioned they had seen her data to her. They may or may not have done something with it such as telling others about it.

As for "it make the OP look bad anyway", why? There's no stigma in not reporting at the time nor any time limit for doing so. There's no stigma in reporting that your data has been breached either, since it's against GDPR to do that and the "friend" would have been well aware of that. It's not "being a grass" either to report, as the other person has committed an invasion of privacy.

OP gave the benefit of the doubt to someone she thought was a friend at the time and has subsequently realised that they are untrustworthy and doesn't want them looking through any of her data again. They are in the wrong as they were well aware that what they were doing was against GDPR and could lead to dismissal, yet did it anyway.

Do it not for yourself but for everyone else. Our health system is based on the trust and confidence of the public and she has broken that trust. It shows a massive lack of judgment and she should not be handling health data in any way, shape or form.

Report it. It is an extreme breach of privacy and confidentiality. I worked for the nhs before and had access to patient records never would I ever do that to someone I'm friends with not even a random patient. She will be investigated and will be fired. It just sounded by your post like a revenge thing because you're now not friends and she has slagged you off to someone else. But this will get back to her as she will probably figure it out soo be prepared for some shit coming your way too because I suppose her losing her job won't be taken lightly.

In that case - as others have said here - she will have had it hammered into her during her training that what she did was ABSOLUTELY UNACCEPTABLE. There are the silly regrettable mistakes we learn from, but this is of a far greater magnitude.

The person did nothing with the data and the person who's data was breached didnt complain. It's debateable if records even go back 5 years to tell you who accessed it and it make the OP look bad anyway.

Sly and petty perhaps but very useful! I am delighted to hear that someone who would do this, and therefore shouldn’t be within a country mile of sensitive healthcare records, is hopefully going to be exposed and sacked. I honestly don’t really care about the motive - though sounds like the phrase ‘live by the sword, die by the sword’ is appropriate.

Please report OP

Report it today because you can guarantee she will do it to someone else (and probably has done if she openly admitted it to you).

Just an example of how seriously its taken - I needed my NHS number during Covid and my Manager had to look at my records just to get it for me. You can’t even look at your own.

Report it today and you’ll be helping someone else not have their confidentiality completely breached.

Report her.
The hospital will investigate.
If it was within what was permitted then nothing will happen.
If she broke the rules she will face the consequences.

I voted YABU.

This should have been dealt with appropriately at the time, not a year later out of revenge.

Absolutely report her

There is no excuse if she looked at yours she will have looked at others that she has absolutely no business to look at and she will know this

We do not want people like this working in healthcare

🙄
Bet you wouldn’t say that if it was your data that was breached.

Don't be a grass. Nobody likes a grass.

It is gross misconduct. As others have explained if you work for the NHS it is drilled into you not to access anything unless you really need to, I have databases at work that give me access to information to info, so I just don't access unless I absolutely need to. Gross misconduct, particularly if she has discussed anything your records contained/

I had to do an investigation into someone in work who looked at a family member's medical records without there being a need to do so. As others have said, it's a breach of GDPR. This person was given a final warning.

Your (ex?) friend shouldn't have looked in the first place without a need to do so and, if you're worried that they might look again, you can report them. Though it might be a bit late to gather the evidence. There's usually tracking on records to see who has accessed them but it's unlikely to go back 12 months. I can't believe this person actually told you they'd done it. It's a serious breach of GDPR.

My friend started working at my doctors as a receptionist. One night when out as a group having a few drinks, she said 'she could look at anyone's medical files anytime she wanted'. I was really anxious over that (even though I know it isn't allowed, she technically could do it) so I changed doctors practices.

It’s your data and your right to choose what happens to it.