Meet the Other Phone. A phone that grows with your child.

Meet the Other Phone.
A phone that grows with your child.

Buy now

Please or to access all these features

AIBU?

Share your dilemmas and get honest opinions from other Mumsnetters.

Data protection breach at drs surgery - compensation?

114 replies

peony90 · 07/05/2026 22:47

Hello

A few months ago, I was told by an acquaintance that a woman who she was friends with (who was in the year above me at school and in the same year as my Husband) had told her personal things on my medical record. She is a receptionist at the surgery I used to be at.

The acquaintance knew how many miscarriages I’d had (not a number you could just pluck out of nowhere), what medication I was taking and how I was hospitalised in a psychiatric unit and the woman in question called me a “psycho” and divulged highly sensitive information about an overdose I took after losing another pregnancy in 2021 as well as both of my parents unexpectedly.

This is being fully investigated and they’ve admitted and confirmed that there was a data protection breach (I’m guessing her staff log in was recorded as opening my medical records when she had no reason to) but I’m still waiting to hear of the full outcome.

I am devastated, embarrassed and upset and my aunt who works for the NHS has advised me to seek compensation once the investigation is completed.

I still suffer from anxiety and depression which is usually well controlled however since the birth of my 2nd DD 6 months ago, I have been suffering PND and this has really knocked me. My antidepressants have been put up to a higher dose and I’ve needed anti anxiety tablets for the first time since 2022.

What would you do?

Long term user, name changed.

OP posts:
Carrottttttttts · 07/05/2026 22:53

Sorry that’s terrible

But will compensation not be offered after the instigation?

Castellio · 07/05/2026 22:55

This reply has been deleted

Message deleted by MNHQ. Here's a link to our Talk Guidelines.

tinyladybird · 07/05/2026 22:56

Firstly I'm sorry so to hear everything that you have went through and now having to deal with this.
Did she honestly not think this would get back to you? What a horrible person effectively kicking someone when they're down. I'd assume she has likely looked up others as well.
Whilst it's not the fault of the GP practice that she is a nosy cow, I'd probably speak to a solicitor to see what they think in the first instance to see if you have a case. Honestly I'd hope she loses her job, karma has a way of dealing with such folk.

Hyperbowl · 07/05/2026 22:57

This reply has been deleted

Message deleted by MNHQ. Here's a link to our Talk Guidelines.

Disgraceful comment, absolutely shameless.

Pistachiocake · 07/05/2026 22:58

This reply has been deleted

Message deleted by MNHQ. Here's a link to our Talk Guidelines.

She might be planning to donate it to Tommy's, or another miscarriage charity. When my mum was hurt in hospital, she thought of sueing to make sure it was taken seriously, but she would have given every penny to a cancer charity.

AmyDudley · 07/05/2026 22:59

This reply has been deleted

Message deleted by MNHQ. Here's a link to our Talk Guidelines.

What a truly disgusting way to speak to somene who is suffering from anxiety and depression. You should be very ashamed of yourself.

meganorks · 07/05/2026 23:02

That's really disgusting and an absolutely awful thing for you to go through. For the receptionist to be reading it is bad enough, but to be gossiping about it is just horrendous. What sort of awful person would gossip about such personal information too? The fact that she has been so blasé about it makes me think you won't be the only victim. I assume she has been sacked?

I'm not normally on the side of seeking compensation unless its something really major. But I think this counts. But I think what I'd really want to know is that the person in question can't work in a medical setting again (not sure if thats possible) and what the surgery will do to ensure this can't happen again. Surely a receptionist shouldn't be able to access medical records??

Blimms · 07/05/2026 23:03

What had happened is appalling and she should lose her job.

I don’t think you should seek financial compensation.

Balloonhearts · 07/05/2026 23:03

Compensation for what? What material, financial loss have you suffered as a result of the breach?

Obviously this person should be sacked a d you should get an apology but you don't just get handed money because something upset you or shouldn't have happened. Compensation is just that. Recompense for a loss. What financial loss have you suffered and can you evidence it?

TheSmallAssassin · 07/05/2026 23:06

This reply has been deleted

Message deleted by MNHQ. Here's a link to our Talk Guidelines.

Why shouldn't she be compensated? It's been a gross invasion of privacy and has caused her a great deal of upset and anxiety. The fines for breaching GDPR are huge and rightly so, reflecting the seriousness of this kind of offence, so I am really not sure why you don't think the OP deserves some recompense?

MatchaTea1 · 07/05/2026 23:07

I don't think compensation is appropriate- the money would come from the NHS at the expense of something else and you don't appear to have lost anything financially. It would be enough for me to see this person sacked.

Castellio · 07/05/2026 23:09

This reply has been deleted

Message deleted by MNHQ. Here's a link to our Talk Guidelines.

whereswilson · 07/05/2026 23:09

Can criminal charges be bought against the person who performed the breach? Thats what I would be interested in too? Compensation could be used to pay for private therapy or psychiatrist, there is a wealth of threads on here saying NHS mental health care is not fit for purpose.

TheSmallAssassin · 07/05/2026 23:10

Balloonhearts · 07/05/2026 23:03

Compensation for what? What material, financial loss have you suffered as a result of the breach?

Obviously this person should be sacked a d you should get an apology but you don't just get handed money because something upset you or shouldn't have happened. Compensation is just that. Recompense for a loss. What financial loss have you suffered and can you evidence it?

You've never heard of personal injury claims? Of course you can be compensated for pain and suffering, including for mental health.

Nat6999 · 07/05/2026 23:10

MatchaTea1 · 07/05/2026 23:07

I don't think compensation is appropriate- the money would come from the NHS at the expense of something else and you don't appear to have lost anything financially. It would be enough for me to see this person sacked.

Most doctors surgeries are private businesses & will most likely have a fund or insurance to cover this.

mynameiscalypso · 07/05/2026 23:11

The circumstances were different but I brought a claim against a medical professional who revealed private medical information about me to a third party. From memory, my lawyer raised a claim on three points - misuse of personal info, breach of confidentiality and breach of the DPA. There is a legal precedent in the case of the DPA that you don’t need to prove a financial loss in order to receive compensation and the compensation can be for the distress the breach caused you. I had an excellent lawyer and the medical professional settled immediately for about 7k + my legal costs. All of went on therapy because of the issues that the breaches caused although I didn’t really do it for the money but because the behaviour was totally unacceptable.

Cleo65 · 07/05/2026 23:11

Will compensation make you feel better - just curious as someone whose highly personal mental health issues were publicised to over 350 people recently. I don't know who they were & I was initially devastated & then decided I had to move along.
Money won't change what happened....

POWdone · 07/05/2026 23:12

Report this to the ICO immediately as it’s illegal.

https://ico.org.uk/make-a-complaint/

This person should be sacked and not be in a position to access other people’s records and potentially do this again. Data protection needs to be taken seriously.

TheSmallAssassin · 07/05/2026 23:13

This reply has been deleted

Message deleted by MNHQ. Here's a link to our Talk Guidelines.

Breaching someone's medical privacy is one of the worst kinds of personal data misuse there is - this isn't a minor thing that the OP should just have to suck up.

Besidemyselfwithworry · 07/05/2026 23:15

MatchaTea1 · 07/05/2026 23:07

I don't think compensation is appropriate- the money would come from the NHS at the expense of something else and you don't appear to have lost anything financially. It would be enough for me to see this person sacked.

I work for the nhs and pay outs by nhs trusts are often paid out for mental anguish, defamation of character (eg calling op a “physco”), and other things such as GDPR not necessarily monetary related.
I’d take a free hour at a solicitors but after the investigation is concluded and you have their outcome and then you can see if there is any mileage in a potential claim.
im sorry you’re going through this it’s disgusting this receptionist did this to you.

PollyBell · 07/05/2026 23:16

Then this should be reported through the appropriate legal channels which would help more with ''pain and suffering'' than pound signs

Picoloangel · 07/05/2026 23:17

@Castellio

Your remarks are completely devoid of sensitivity or kindness. It is impossible for others to understand the impact of a miscarriage and how privately some people
feel that they want to grieve this invisible loss. For an employee to betray the trust placed in them to deal with deeply personal information sensitively and confidentially is a gross breach of trust . I hope the employee loses their job and that OP is compensated. The organisation should have had sufficient checks in place and should have been sufficiently confident of the employee’s integrity; they didn’t and they weren’t . It’s their failing and it’s caused huge upset.

Twice my entire, sensitive and highly irrelevant medical history has been disclosed in the context of a routine investigation. Twice. All because someone was too lazy to apply a moment’s thought to what they were doing and why. It’s was hurtful and, the second time, infuriating.

Your responses are appalling.

Burningbud1981 · 07/05/2026 23:17

MatchaTea1 · 07/05/2026 23:07

I don't think compensation is appropriate- the money would come from the NHS at the expense of something else and you don't appear to have lost anything financially. It would be enough for me to see this person sacked.

Why do people always say that ? Do you really think the NHS will forgo giving someone life saving medical treatment to pay compensation ?! 🙄

Pearshapedpear · 07/05/2026 23:17

MatchaTea1 · 07/05/2026 23:07

I don't think compensation is appropriate- the money would come from the NHS at the expense of something else and you don't appear to have lost anything financially. It would be enough for me to see this person sacked.

Get your facts right…. This is not the case.

purpleme12 · 07/05/2026 23:18

There was a thread the other day saying how sometimes when a customer has received someone else's insurance documents (so a data beach), but nothing bad has happened from it, they've still had compensation. And this situation about the doctors receptionist sounds worse than that! I can understand more getting compensation for this