I’ve reported my friend for an NHS confidentiality breech

[BundleOfCookies]

I have a (now ex) friend who works for the NHS who works as a clerical officer who we’ll call Karen. I’m in the early stages of pregnancy and haven’t told anyone other than my dh. Had my first midwife appointment and since this, I’ve had some congratulations texts from people within my friendship group. When I queried how they knew I was pregnant, they said they heard it from Karen. When I asked Karen about this she said she saw it on my file, and shrugged like it wasn’t a big deal. I’m really upset that she’s just looked me up on her hospitals system like this. She works where my appointments are and openly said that she’s done this and has done it to a few of us in the group so she knows what’s going on. It’s my first pregnancy and I’m so anxious and I’m so upset so many people know about it.

At the time I was so angry I instantly filed a complaint to the hospital. Information governance then contacted me to say they’d be conducting an internal audit. This was 3 weeks ago and I’ve not heard anything since. I’m still upset with Karen but I now feel so guilty I’ve done this. I don’t want her to loose her job. Karen knows I’ve done this because I’ve told her and she’s livid and none of our mutual friends are talking to me now.

Is there anyone here who works for the NHS who can explain what happens in these situations? I’m guessing everything is fine because I’ve not heart anything from information governance since but I’m so worried

And this ☝🏻

Pedants' Corner is that way -->

Correcting or commenting on SPAG is rude and inappropriate.

How pathetic.

Your daft comments (because it’s more than one isn’t it) aren’t helpful at all to the OP, who is in a very upsetting situation.

Imagine trying to belittle a pregnant lady’s spelling who’s wanting advice and reassurance.

It's easy for me to say as not my friends but you need to try and stop thinking or stressing about this. It's not good for you or your pregnancy.
She is in the wrong . It's exceptionally unprofessional what she has done .
She also took away from you the chance to tell people you are expecting. That's a lovely exciting thing. Especially first time .
These people are not good friends. They should be backing you up right now . And she should be ashamed of her behaviour.

They won’t just be looking at her accessing your files, but all the other times she’s done this as well. I suspect, to not put too fine a point on it, she’s fucked. She knew what she was risking and did it anyway, that’s on her not you.

Investigations take time, and you may not get any update for months. I believe you can request an update if you haven’t heard back after six months.

Have you stopped to think if the OP might be dyslexic? Those two words are often mixed up by those with dyslexia.

I work for the NHS and she almost certainly be sacked and thus may struggle to get another job. All data lookups are recorded and so her guilt can be proven easily. Yes she was wrong of course. However it will forever taint what should be a happy time for you. I hope all goes well for your pregnancy.

Newsflash, some people struggle with spelling certain words. Some people have dyslexia. Some people (shock horror) may not have had the privilege of a good education. Does it mean they can’t just get some advice on a forum about something important and upsetting at a time they are the most vulnerable? This is ‘mumsnet’, it’s a forum for mums to support mums or mums to be. It’s not a forum to make others feel inadequate. @PurpleChrayn @Girlking

I work in poublic healthcare and this would be serious misconduct and a sackable offence in any country I am aware of.

That's a huge breach of GDRP she will probably lose her job and a possible fine for the health board too

Op don't feel guilty, you did the right thing. She's committed a serious data breach, the stupid nosey idiot. All NHS get trained on this. Gross misconduct and deserves everything that's coming to her.

I've commented on this thread earlier and I wrote breech instead of breach.
Shoot me now! I too think it's rude to point out small errors when we know exactly what the OP meant.
The laughable thing is I'm a midwife so I should know the difference between breech and breach.

People generally fire themselves. That’s what she’s done here.

Just want to add that she must be as thick as pig shit if she didn't realise this

I work in a GP surgery. We aren't allowed to access the medical records of people we know.

We also have to have a reason for accessing patients medical records, not just look at them when we feel like it, and are not allowed to discuss a patients medical record or divulge any information about them to anyone except the patient, and people they have given consent for us to speak to.

She would likely be sacked if you reported her. She's completely out of order doing this to you.

What she has done is awful. Total betrayal of trust.
The rules are there to protect patients as our most confidential information, that we trust the medical profession to keep confidential, is stored in hospitals and GP surgeries.
She is clearly unsuited to her job, has taken nothing on board from her training and thinks she can access medical records and spread gossip.
You have nothing to feel bad about, in fact you should be proud of yourself. People like that do not belong in positions of trust.

Exactly!!!

Mistakes are so easy on the latest iteration of whatever MN uses for posts, and they quite often default to the last likely option. There instead of their springs to mind. In fact just typing made it opt for there immediately.

OP hasn’t been confidential about it because she had to ask the mutual friends how they knew about her pregnancy!

I would have been livid of someone had done this, I actually didn’t tell anyone apart from DH and work about my pregnancy until well after the anomaly scan.

Out of curiosity, when the NHS conducts an audit of her digital footprint, how would they know that she is accessing records without authority? Would they cross-check the cases she is working on with the names of the persons whose records she accessed?

You were absolutely unquestionably correct to report her. This is a gross breach of confidentiality and it's astounding she was so brazen about it.

She should be sacked.

What Karen did was completely unacceptable. Looking up patient records and then telling people confidential medical information - Jesus! I'm so glad you reported her. She's untrustworthy and not fit to work in that job, if that's what she does. I'm sure that's against some kind of rules and regulations. Telling your friends that you're pregnant!!!!

Just a note for information. If anyone ever suspects that their personal health records have been accessed inappropriately, the correct way to report is to contact the Caldicott Guardian for the practice or Trust. Not PALS or anyone else.
In General Practice this is most likely to be the practice manager, in hospital it will be a senior person in management or HR. The information is on the Trust or Practice website and can be searched online. By going directly to the CG the whole process can happen swiftly and discreetly.

I was accused of this a few years ago by my ex husbands new partner. I hadn't looked her up and never would but I was restricted from all computers and an investigation took place. I was told I'd be escorted from the building if they found anything.
They didn't as I hadn't done it and I was offered counselling

This how seriously accessing patient records is taken, never mind sharing:

https://www.theguardian.com/uk-news/2025/mar/06/nhs-staff-may-have-illegally-accessed-records-of-nottingham-attack-victims