To report ex friend who looked at my medical files?

Yes but OP, you only want to do this in retaliation for her back-stabbing. It's completely unrelated to her accessing your medical file which should have been dealt with as a breach of privacy, at the time it happened.

That is not the OPs responsibility. Anyone with access to medical notes is told it is a sackable offence to look up someone they knows records as it's a gross breach of data protection.

My guess would be because she thought she was her friend so sadly thought like a lot of people on here ‘but I can’t report her because she’s my friend’, then the friend showed her she definitely wasn’t her friend by backstabbing and lying, and so now OPs eyes are wide open and now the friend will hopefully face the consequence of ALL of her not-a-friend actions.

Easy to spot on this thread the kind of people who should not be trusted around other people's sensitive data. It's a shame there's no obvious way of screening out people like this when recruiting for certain jobs.

I'm sorry this happened to you and you do need to report it.
She should not have accessed your notes.

Oh I agree honestly.

OP is BU to not have reported as soon as she became aware.

The best time to report was at that moment. Unfortunately for whatever reason it wasn't reported. The second best time is now.

You didn't care a year ago - you do now - because she hurt your feelings

YABU to not have reported her a year ago

Karma doesn't work this way OP

If this is all true why wait the year? That is the thing

You can only hope

You weren't that bothered a year ago now you have fallen out you want to get her sacked.

I think people need to remember these people who do this are in positions of power, trusted with incredibly personal and sensitive information of patients who have a right to expect that their personal info is accessed only when needed/appropriate by people on a needs-to-know-basis.

They have the capacity to cause great harm, and to destroy a patient's sense of security and privacy, and impact their level of confidence in accessing healthcare.

You cannot be in that position of power unless you can be trusted. They have shown themselves untrustworthy.

This goes far beyond 'petty' or anything to do with interpersonal dynamics. It is not petty or vindictive to report it, it's necessary for the greater good.

Seems like a lot of people on this thread criticising OP for reporting this person don't work in these positions or understand GDPR.

Being able to access patients' private medical information is a privilege that comes with being in a trusted position. Anyone who is capable of violating that trust to be nosy or for even more nefarious purposes is not safe in this role. If they lose their job it's on them.

These threads always attract people guilt-tripping the victim of this unprofessional, boundary-breaking, potentially illegal behaviour.

Oh, they might lose their job! It's on you!

No lol. It's on the clinician or admin worker who did it.

When you work for the NHS or private health services it's DRILLED into you that you follow GDPR. You only access records on a need to know basis. If a patient that you know personally's file comes across your desk, you avert your eyes for someone else to deal with if at all possible. These people know that they shouldn't be doing it. I have no sympathy when they're caught.

100% this! It's a case of we aren't friends now and I'm going to get her sacked.

If I was you I would just block her and never talk to her again. You should have reported her when she did it not now.

But to be fair, a ‘friend’ wouldn’t go and read your medical notes. There could be extremely personal and revealing information on her notes.

In this case I agree. But it's still a significant repercussion. She used to be the OPs friend. I would think hard about having a former friend become unemployed.

That's life....

She's surely been told the rules, she's not a reasonable person to work in this capacity

Best she finds a job better suited to her abilities.

By ‘backstabbing and lying’ about you, do you mean regarding your medical notes? As in saying you are lying about your health in some way?

@KrisAkabusi She brought it on herself. I wouldn't have much sympathy for that

You can report it, she's in the wrong. But she will almost certainly lose her job. If you're happy with that, go ahead.

This

Of course report it! If she did it to you she will do it to others.

My SIL did this to me and told me! I took your approach and asked her to never access my records or those of my children again unless there was a clear professional need. She was mortified and falling over herself to apologise but it still makes me feel cross when I think about it. My understanding is that she could have got into a lot of trouble if I had reported it. She has since retired.

I think your next move and the way you word any communication depends on what you are trying to achieve. To stop her accessing your records unnecessarily again? Or for revenge because you have now fallen out? If it’s the former, I would send an email to her employer outlining that you are aware of a previous breach and whilst you are willing to let it pass, you would like assurances that it will not happen again. If it’s revenge you are after, I would think twice.

Actually this is a serious issue. All access is logged so if investigated they will be able to see if she accessed part of your records that she didn’t need to.

The fact that she told you is a red flag. You need to report her, friend or not, this is a confidentiality issue which is more of an issue than GDPR. In my HCP breech of confidentiality can lead to being struck off.

You need to raise a complaint asap. Even if she does have legal access to your information she should not be telling you. If you have proof then provide it as part of your complaint.

Regardless of your friendship or lack of it, breech of confidentiality is very serious.

She should be sacked. She looked through someone's records.

Op, please report her.

To clarify, are the stories she is circulating about you connected to your medical notes?