To think this is much more serious than they seem to think it is?

[OnceWasBadEnough]

A few months ago I went for a job and had to give permission for my medical records to be seen as part of the process. I gave permission and then was told I hadn’t got the job because of something they had found on my records. I was shocked and went to my GP to ask to see my records and found out my sister’s history has been put on my record by accident! I found out info about my sister that she may not have wanted me to know (I explained to family and she then told me this applied to her). Before this she had been for an appointment and they’d called out my name instead of hers! It was like they had completely mixed us up. We made a complaint and they seemed not to be bothered really, asking ‘what do you want us to do? We’ve taken the info off now and put it right’ That was all they said. Yesterday I went back to the doctor about something else. I had a vaccination while I was there. When I went through afterwards to see my doctor, the GP told me I shouldn’t have had this because I’m pregnant. My sister is pregnant, not me! Again, the practice manager is totally not bothere, saying ‘we’ve removed it now-don’t worry.’ We’re planning to take this further this time. Not good is it?!

It's frankly appalling. And illegal.

That's horrendous! Although I've never heard of needing access to medical records when applying for a job?!
Complain to the information commissioner.

Wow that’s ridiculous!
Put in an official complaint and if you’re not satisfied you could report to CQC

Shit no. Patient confidentiality, potential mix-ups of dx/allergies, GDPR, every sort of fuck up you could possibly mention really!

No, there’s a data protection breach. Complain. The data controller needs to explain.

Yes. Terrible. I'd complain to PALs

That is awful! They have cost you a potential job and revealed sensitive medical information to both if you. This is a huge data protection issue and would be taken very seriously with the new GDPR regulations.

You need to put a complaint in writing to somebody (can't remember who), to say that there has been a data breach. Even telling you that your sister is pregnant is a seriously serious serious data breach.

Can someone clarify who it is she needs to complain to (I dozed off in those sessions).

You definately should complain.

Are you twins with similar names?

Only ask because i knew a maria victoria and victoria maria set of twins and i could kind of understand a mix up in that case

As for them. They have 72 hours to inform both you and your sister that there has been a data breach. They have fucked up big style.

Similar happened to me.my Pred were muddled with another patient who had a similar (but not the same) surname, completely different first name and completely different date of birth.

I was sent this persons notes at one point and had so
Much intonation I could find her on Facebook!

Nothing was done other than “these things happen, we’ve changed your records now” at every level.

I changed practice as I no longer trusted them. There was nothing else I could do.

Shocking. Patient confidentiality to start with. Loss of earnings - their mistake lost you a job. Potentially a life threatening mistake, given your sister is pregnant - what if the vaccination was the other round, for example, and they had given her the vaccination despite the fact she shouldn’t have had it as she is pregnant. The practise manager is being negligent by assuring you it has been fixed when it hasn’t.

I think you need to complain in writing to the practise manager first, then escalate it to NHS England. They need to look into why this keeps happening.

As others have said, I would also complain to the ICO.

You need to report it as a GDPR data breach to the Information Commissioners Office....and tell them that's what you're doing, that'll terrify them but quite rightly as it's appalling what they've done. I'd be going mad if I were you.

Holy shitting fuck thats awful

Pred = notes ??!
Intonation = information

The practice also has a duty to inform the ICO of the breach.

That is 72 hours after them first learning of the data breach. Either of them.
They haven't done that, they will be fined. I hope they have good insurance!

Apart from GDPR, it's in the realms of medical negligence? The first thing any professional does with me is gets me to confirm name, date of birth, first line of address, any allergies.

Weird.

Extremely serious data breach. The GP’s surgery need to report it to the ICO and notify both you and your sister. You also have a private right of action against them for the damage you’ve suffered as a result of the data breach.

I didn’t know potential employers could insist on seeing your medical records and decline you for a job as a result of the contents, though.

WTF?!? No id be raging and would escalate it as much as possible

Both you and your sister should raise a complaint about this

That's totally unacceptable unless you're twins and have the same first name and surname.

Also when you contacted the practice to tell them about the issue did they contact your sister to say they had breached her data? They are under an obligation to do so.

Sounds like they're trying to brush it under the carpet. They know how serious it is.

Did you contact the job to tell them about the mistake?

You should complain to ICO, CQC and copy your MP in.

Not only might this have affected your job prospects but the potential for either you or your dsis being given the wrong medication or treatment is concerning.